Patents by Inventor Andrzej Kielbasinski

Andrzej Kielbasinski has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • CRYPTOGRAPHIC BINDING OF NATIVE APPLICATION AND EXTERNAL BROWSER SESSIONS
    Publication number: 20230017382
    Abstract: Systems and methods are provided for receiving information associated with a final single sign-on page from a native browser, extracting a public key from the information associated with the final single sign-on page, generating a single sign-on token to bind a browser session and a native application session, associating the single sign-on token with the public key extracted from the information associated with the final single sign-on page, and encrypting the single sign-on token with the public key to bind the browser session and the native application session.
    Type: Application
    Filed: July 15, 2021
    Publication date: January 19, 2023
    Inventors: Danxiang Li, Vincent Parla, Andrzej Kielbasinski, Dany Jacques Rochefort
  • Single sign-on authentication via browser for client application
    Patent number: 9992187
    Abstract: In one embodiment, a method includes initiating at a client application at a client device, a single sign-on authentication with a security device, receiving at the client application, a session identifier and location of a web portal for the single sign-on authentication from the security device, and passing the session identifier and location of the web portal from the client application to a browser installed at the client device, for use by the browser in performing the single sign-on authentication at the client device. An apparatus and logic are also disclosed herein.
    Type: Grant
    Filed: December 21, 2015
    Date of Patent: June 5, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Jiajun Lu, Songling Han, Andrzej Kielbasinski, Peter Davis
  • Redirect to inspection proxy using single-sign-on bootstrapping
    Patent number: 9894055
    Abstract: An authentication request is generated when a user of a client device attempts to initiate a user session with an application managed by a service provider. An authentication response is generated based on credentials received from the user. The authentication response includes an assertion on behalf of the user. A delivery resource locator for the assertion is rewritten to a resource locator of a proxy in order to redirect the assertion to the proxy. The authentication response is sent to the client device together with the resource locator of the proxy in order to cause the client device to send the assertion to the proxy that decodes the re-written resource locator and sends the assertion to the service provider.
    Type: Grant
    Filed: January 29, 2016
    Date of Patent: February 13, 2018
    Assignee: Cisco Technology, Inc.
    Inventors: Vincent E. Parla, David McGrew, Andrzej Kielbasinski
  • SINGLE SIGN-ON AUTHENTICATION VIA BROWSER FOR CLIENT APPLICATION
    Publication number: 20170180351
    Abstract: In one embodiment, a method includes initiating at a client application at a client device, a single sign-on authentication with a security device, receiving at the client application, a session identifier and location of a web portal for the single sign-on authentication from the security device, and passing the session identifier and location of the web portal from the client application to a browser installed at the client device, for use by the browser in performing the single sign-on authentication at the client device. An apparatus and logic are also disclosed herein.
    Type: Application
    Filed: December 21, 2015
    Publication date: June 22, 2017
    Applicant: CISCO TECHNOLOGY, INC.
    Inventors: Jiajun Lu, Songling Han, Andrzej Kielbasinski, Peter Davis
  • REDIRECT TO INSPECTION PROXY USING SINGLE-SIGN-ON BOOTSTRAPPING
    Publication number: 20160149898
    Abstract: An authentication request is generated when a user of a client device attempts to initiate a user session with an application managed by a service provider. An authentication response is generated based on credentials received from the user. The authentication response includes an assertion on behalf of the user. A delivery resource locator for the assertion is rewritten to a resource locator of a proxy in order to redirect the assertion to the proxy. The authentication response is sent to the client device together with the resource locator of the proxy in order to cause the client device to send the assertion to the proxy that decodes the re-written resource locator and sends the assertion to the service provider.
    Type: Application
    Filed: January 29, 2016
    Publication date: May 26, 2016
    Inventors: Vincent E. Parla, David McGrew, Andrzej Kielbasinski
  • Redirect to inspection proxy using single-sign-on bootstrapping
    Patent number: 9294462
    Abstract: An authentication request is generated when a user of a client device attempts to initiate a user session with an application managed by a service provider. An authentication response is generated based on credentials received from the user. The authentication response includes an assertion on behalf of the user. A delivery resource locator for the assertion is rewritten to a resource locator of a proxy in order to redirect the assertion to the proxy. The authentication response is sent to the client device together with the resource locator of the proxy in order to cause the client device to send the assertion to the proxy that decodes the re-written resource locator and sends the assertion to the service provider.
    Type: Grant
    Filed: January 15, 2014
    Date of Patent: March 22, 2016
    Assignee: Cisco Technology, Inc.
    Inventors: Vincent E. Parla, David McGrew, Andrzej Kielbasinski
  • Redirect to Inspection Proxy Using Single-Sign-On Bootstrapping
    Publication number: 20150200924
    Abstract: An authentication request is generated when a user of a client device attempts to initiate a user session with an application managed by a service provider. An authentication response is generated based on credentials received from the user. The authentication response includes an assertion on behalf of the user. A delivery resource locator for the assertion is rewritten to a resource locator of a proxy in order to redirect the assertion to the proxy. The authentication response is sent to the client device together with the resource locator of the proxy in order to cause the client device to send the assertion to the proxy that decodes the re-written resource locator and sends the assertion to the service provider.
    Type: Application
    Filed: January 15, 2014
    Publication date: July 16, 2015
    Applicant: Cisco Technology, Inc.
    Inventors: Vincent E. Parla, David McGrew, Andrzej Kielbasinski