Stephen T Moore DeceasedLas Cruces, NM

8327142, Dec 4, 2012

Feb 5, 2007

11/702371

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US

SecureAuth Corporation - Irvine CA

H04L 29/06

713169, 705 67

A method and system for mutually authenticating a client and a server is provided in accordance with an aspect of the present invention. The method commences with transmitting a token from the server to the client. Thereafter, the method continues with establishing a secure data transfer link between the server and the client. A server certificate is transmitted to the client during the establishment of the secure data transfer link. The method continues with transmitting a response packet to the server, which is validated thereby upon receipt. The system includes a client authentication module that initiates the secure data transfer link and transmits the response packet, and a server authentication module that transmits the token and validates the response packet.

2008007, Mar 27, 2008

Jul 23, 2007

11/880599

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US

H04L 9/32

713156

A method and system for secured network access is provided in accordance with the present invention. The method begins with receiving a login request from a client on a router. Thereafter, a certificate transfer instruction for the router to an authentication appliance is generated where the client lacks a copy of a client certificate. The client is authenticated with a challenge-response sequence, the response to which is deliverable through an out-of-band communications channel. Upon authentication, the client certificate and the client private key are transmitted to the client, which are used to authenticate the client to the network.

2009002, Jan 22, 2009

Sep 18, 2008

12/212959

Craig Lund - Irvine CA, US
Garret Grajek - Huntington Beach CA, US
Stephen Moore - Portland OR, US
Mark Lambiase - Ladera Ranch CA, US

H04L 29/06

726 15

Authenticating a client to a server accessible through an Internet Protocol Security (IPSec) Virtual Private Network (VPN) appliance. The IPSec VPN appliance and an SSL VPN appliance are configured to receive an initialization command from the client. The SSL VPN appliance is in communication with an authentication appliance for authenticating the client to the server. In response to the initialization command, the authentication appliance generates a client key pair including a client private key and a client public key. The authentication appliance generates a client certificate and a client IPSec profile. The authentication appliance transmits the client key pair, the client certificate and the client IPSec profile to the client. A secure communication session between the client and the server is established. The secure communication session is established through the IPSec VPN appliance. Upon receipt of the IPSec profile, the communication session between the client and the server is encrypted.