US 12,413,587 B2
Application identification
David Steven Gross, Cincinnati, OH (US); Jennifer Lee Bammel, Dexter, MI (US); David William Matteson, Dexter, MI (US); Christopher Carl Cassell, Ann Arbor, MI (US); and Kyle David Mills, Ann Arbor, MI (US)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Sep. 28, 2023, as Appl. No. 18/477,063.
Application 18/477,063 is a division of application No. 17/194,000, filed on Mar. 5, 2021, granted, now 11,799,856.
Prior Publication US 2024/0031365 A1, Jan. 25, 2024
Int. Cl. H04L 9/40 (2022.01); H04L 101/663 (2022.01)
CPC H04L 63/0876 (2013.01) [H04L 2101/663 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A method performed by an authentication service, the method comprising:
receiving, from an application on a remote client device, an access request to access a resource managed by the authentication service, the access request received via a first communication channel between the authentication service and the remote client device;
in response to the access request, sending a directive to the application, the directive directing the application to send an identity request for an identity of the application to an identification agent on the remote client device, the identification agent configured to, in response to the directive, make an identity determination of an identity of the application without relying on the application for the identity determination;
receiving, from the identification agent, the identity of the application, wherein the identity is received via a second communication channel between the authentication service and the identification agent, the second communication channel being separate from the first communication channel;
based at least in part on the identity of the application, making an access determination regarding whether to allow the application to access to the resource; and
sending, to the application at the remote client device, a response to the access request, the response based at least in part on the access determination.