System for managing multi-user sign-on in a segmented network

摘要

Disclosed is a system for providing multi-user management for personal computing devices over an entity network. The system is typically configured to (i) receive a first request from the personal computing device to receive first user-specific information, (ii) authenticate the user identifier associated with the first user, (iii) associate the user identifier associated with the first user with the device identifier, (iv) communicate a first response to the personal computing device based on authenticating the user identifier, (v) receiving a second request from the personal computing device to receive second user-specific information associated with the first user for a second application, (vi) determining that the device identifier is associated with the user identifier associated with the first user, (vii) and communicating a second response to the personal computing device based on determining that the device identifier is associated with the user identifier associated with the first user.

主权项

1. A system for providing a multi-user experience on a mobile device, the system comprising:
a processor; a memory; a communication interface in communication with an entity network and with the mobile device; and a multi-user management module stored in the memory, executable by the processor and configured for:
receiving a security certificate from the mobile device;authenticating the security certificate;based on authenticating the security certificate, establishing network communication between the mobile device and a secured network segment;receiving a first request from the mobile device to receive first user-specific information for a first application executed by the mobile device from the secured network segment in communication with the entity network, wherein the first request comprises a device identifier and a user identifier associated with a first user;authenticating the user identifier associated with the first user;associating the user identifier associated with the first user with the device identifier;communicating a first response to the mobile device based on authenticating the user identifier associated with the first user, the first response including the first user-specific information;receiving a second request from the mobile device to receive second user-specific information associated with the first user for a second application executed by the mobile device from the secured network segment, wherein the second request comprises the device identifier;determining that the device identifier is associated with the user identifier associated with the first user;communicating a second response to the mobile device based on determining that the device identifier is associated with the user identifier associated with the first user, the second response including the second user-specific information;receiving a third request from the mobile device, wherein the third request comprises the device identifier and a second user identifier associated with a second user;disassociating the user identifier associated with the first user and the device identifier based on receiving the third request;associating the second user identifier with the device identifier based on receiving the third request;determining that a pre-defined time period has elapsed after receiving the third request;determining that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed; anddisassociating the second user identifier associated with the second user and the device identifier based on determining that the mobile device has not communicated a subsequent request before the pre-defined period has elapsed.