US 12,395,465 B2
Method and system of securing VPN communications
Alan Thomas Gavin Jowett, Eagle Mt., UT (US); Andrew Albert Hodgkinson, Highland, UT (US); Lance Vernon Crandall, Saratoga Springs, UT (US); and Jeffrey Scott Pinkston, Draper, UT (US)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Apr. 4, 2024, as Appl. No. 18/627,243.
Application 18/627,243 is a division of application No. 16/916,354, filed on Jun. 30, 2020, granted, now 11,979,376.
Prior Publication US 2024/0250934 A1, Jul. 25, 2024
Int. Cl. G06F 21/45 (2013.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01); G06F 21/40 (2013.01); G06F 21/62 (2013.01)
CPC H04L 63/0272 (2013.01) [H04L 9/3213 (2013.01); H04L 63/0435 (2013.01); H04L 63/0876 (2013.01); H04L 63/20 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for providing access by a device to a resource server, the method comprising:
transmitting a first part of a master session key to the resource server;
responsive to transmitting the first part of the master session key to the resource server, receiving a second part of the master session key from the resource server;
generating, using a resource client software application installed on the device, from the first part and the second part of the master session key, the master session key for a communication session between the device and the resource server;
transmitting, from the device to an identity platform, an authentication request for providing an access token for use by the device in accessing the resource server for the communication session between the device and the resource server, the authentication request including a nonce derived using the resource client software application installed on the device, the nonce derived from the master session key by generating a hash of the master session key;
determining if the resource server requires compliance with one or more conditional access policies;
upon determining that the resource server requires compliance with the one or more conditional access policies, transmitting information to the identity platform that verifies that the device complies with the one or more conditional access policies, and
responsive to transmitting the authentication request, receiving the access token from the identity platform, the access token including the nonce and the access token including information that provides confirmation that the device complies with the one or more conditional access policies.