Secured access to resources using a proxy

摘要

A method of authentication and accessing resources is provided. A client device may send a request to a proxy device to access a resource, such as an enterprise resource. The proxy device may authenticate with one or more servers associated with the resource. During authentication, the proxy device may receive a request for a signature controlled by the client device. In response, the proxy device may send a request to the client device for the signature. The request may also include context information that identify a data structure of authentication information exchanged (or to be exchanged) during the authentication session. If the client device verifies the context information, the client device may send the requested signature.

主权项

1. A method comprising:
receiving, at a proxy device and from a client device, a request for a resource; sending, from the proxy device to a resource management device, a request for the resource; initiating an authentication session between the proxy device and the resource management device to authenticate the proxy device with the resource management device; generating, by the proxy device, a request for the client device to provide a signature, wherein the request for the client device to provide the signature comprises context information identifying a data structure of (1) authentication information previously exchanged between the proxy device and the resource management device during the authentication session or (2) authentication information to be sent by the proxy device to the resource management device during the authentication session; receiving, at the proxy device and from the client device, the signature; and sending, from the proxy device to the resource management device, the signature.