US 11,991,162 B2
Secure application access system
Anurag Kahol, Los Gatos, CA (US); Anoop Kumar Bhattacharjya, Campbell, CA (US); and Balas Natarajan Kausik, Los Gatos, CA (US)
Assigned to Bitglass, LLC, Austin, TX (US)
Filed by Bitglass, LLC, Austin, TX (US)
Filed on Feb. 23, 2022, as Appl. No. 17/679,055.
Application 17/679,055 is a continuation of application No. 17/092,777, filed on Nov. 9, 2020, granted, now 11,297,048.
Application 17/092,777 is a continuation of application No. 16/876,163, filed on May 18, 2020, granted, now 10,855,671, issued on Dec. 1, 2020.
Application 16/876,163 is a continuation of application No. 14/954,989, filed on Nov. 30, 2015, granted, now 10,757,090, issued on Aug. 25, 2020.
Application 14/954,989 is a continuation of application No. 13/957,274, filed on Aug. 1, 2013, granted, now 9,553,867, issued on Jan. 24, 2017.
Prior Publication US 2022/0182373 A1, Jun. 9, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 67/1001 (2022.01); H04L 67/56 (2022.01)
CPC H04L 63/0815 (2013.01) [H04L 63/0281 (2013.01); H04L 63/0884 (2013.01); H04L 63/10 (2013.01); H04L 63/105 (2013.01); H04L 63/20 (2013.01); H04L 67/1001 (2022.05); H04L 67/56 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A method for improving secure access to cloud-based application programs, comprising:
receiving, by an identity provider, a single-sign-on request from a device for access to a cloud-based application program, the device directed by an application server to a cloud network location of the identity provider, the identity provider configured to authenticate computer security validation requests for the application program;
validating, by the identity provider, the single-sign-on request;
in response to validating the single-sign-on request, directing, by the identity provider, the device to a cloud network location of an application proxy server along with a valid identification assertion, the device thereafter communicates via the application proxy server for subsequent accesses to the application program, the application proxy server not co-located with the application server.