IP Library › Granted Patent US 11,436,314
Granted Patent B2
US 11,436,314 · App. 16/274,999 · Granted Sep 6, 2022

System and method for provisioning non-enterprise client devices with access credentials

Inventors: Abdullah Alzahrani (Dhahran, SA); Ibrahim Alomari (Dhahran, SA); Jewahir Abubeker (Dhahran, SA); Hassan Ayoub (Dhahran, SA); Meshal Alhazmi (Dhahran, SA)
Assignee: Saudi Arabian Oil Company
G06F21/45H04L51/04H04L61/4523
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,436,314
App. No.
16/274,999
Granted
Sep 6, 2022
Kind
B2
Abstract

A system, a method, or a computer program for provisioning a non-enterprise client device with access to an extranet enterprise domain. The system includes an enterprise client device connected to an intranet, a provisioner that receives an extranet registration request from the enterprise client device, an active directory connected to the intranet, a database that stores a non-enterprise client record populated with the non-enterprise client data, a primary transmission system connected to the intranet that transmits a portion of the non-enterprise client data and a linkage message outside of the intranet, and a secondary transmission system connected to the intranet and configured to transmit to an access message outside of the intranet, wherein the provisioner generates a unique permanent identification ID INDEX for the non-enterprise client record.

Claims (46)

1. A provisioning system that provisions a non-enterprise client device with access to an extranet enterprise domain, the provisioning system comprising:

an enterprise client device connected to an intranet;

a provisioner that receives an extranet registration request from the enterprise client device and parses enterprise client data and non-enterprise client data from the extranet registration request;

an active directory connected to the intranet and having an enterprise client record associated with the enterprise client data;

a database that stores a non-enterprise client record populated with the non-enterprise client data;

a primary transmission system connected to the intranet that transmits a portion of the non-enterprise client data and a linkage message outside of the intranet; and

a secondary transmission system connected to the intranet and configured to transmit to an access message outside of the intranet,

wherein the provisioner generates, inside the intranet, a unique permanent identification ID INDEX that maps the non-enterprise client device to the enterprise client device to register the non-enterprise client device in the intranet,

wherein the provisioner creates an initial password for the non-enterprise client account associated with the unique permanent identification ID INDEX ,

wherein the access message is sent in an SMS text message to the non-enterprise client device and includes the initial password, and

wherein the portion of the non-enterprise client data transmitted by the primary transmission system and the access message transmitted by the secondary transmission system are utilized to activate the non-enterprise client account in the extranet enterprise domain.

2. The provisioning system of claim 1 , wherein the provisioner generates the linkage message and the access message.

3. The provisioning system of claim 1 , wherein the linkage message is sent to a non-enterprise client device in an email message.

4. The provisioning system of claim 1 , wherein the active directory comprises a lightweight directory access protocol (LDAP) directory.

5. The provisioning system of claim 1 , wherein the provisioner queries the active directory in response to the extranet registration request to locate the enterprise client record.

6. The provisioning system of claim 1 , further comprising:

a registration application programming interface that receives the linkage message from the provisioner and generates an email message, including an activation link.

7. The provisioning system of claim 6 , wherein the provisioner performs an outbound call through the intranet firewall to the registration application programming interface.

8. The provisioning system of claim 6 , wherein the outbound call comprises a representational state transfer (REST) application programming interface call.

9. The provisioning system of claim 6 , wherein the registration application programming interface receives the non-enterprise client identifier ID INDEX for the non-enterprise client.

10. The provisioning system of claim 6 , wherein the registration application programming interface receives the portion of the non-enterprise client data.

11. The provisioning system of claim 1 , wherein the portion of the non-enterprise client data comprises a non-enterprise email address and an automatic number identification for a non-enterprise client device.

12. A method for provisioning a non-enterprise client device with access to an extranet enterprise domain, the method comprising:

receiving an extranet registration request from an enterprise client device connected to an intranet;

parsing enterprise client data and non-enterprise client data from the extranet registration request;

querying an active directory for an enterprise client record based on the enterprise client data, the active directory being connected to the intranet;

storing the non-enterprise client data in a non-enterprise client record;

generating, inside the intranet, a unique permanent identification ID INDEX that maps the non-enterprise client device to the enterprise client device to register the non-enterprise client device in the intranet;

creating an initial password for a non-enterprise client account associated with the unique permanent identification ID INDEX ;

sending the access message, which includes the initial password, in an SMS text message to the non-enterprise client device;

transmitting by a primary transmission system a portion of the non-enterprise client data outside of the intranet; and

transmitting by a secondary transmission system the access message outside of the intranet, the secondary transmission system being different than the primary transmission system,

wherein the portion of the non-enterprise client data transmitted by the primary transmission system and the access message transmitted by the secondary transmission system are utilized to activate the non-enterprise client account in the extranet enterprise domain.

13. The method of claim 12 , further comprising:

generating a linkage message based on the non-enterprise client data; and

transmitting the linkage message outside of the intranet.

14. The method of claim 13 , wherein the transmitting the linkage message comprises sending an electronic mail message to a non-enterprise client device.

15. The method of claim 13 , further comprising:

receiving the linkage message at a registration application programming interface.

16. The method of claim 15 , further comprising:

generating an electronic mail message by the registration application programming interface; and

sending the electronic mail message to the non-enterprise client device,

wherein the electronic mail message includes an activation link.

17. The method of claim 12 , wherein the active directory comprises a lightweight directory access protocol (LDAP) directory.

18. The method of claim 12 , further comprising:

receiving the portion of the non-enterprise client data at a registration application programming interface.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 20, 2019
From: ALZAHRANI, ABDULLAH; ALOMARI, IBRAHIM; ABUBEKER, JEWAHIR; AYOUB, HASSAN; ALHAZMI, MESHAL
To: SAUDI ARABIAN OIL COMPANY
Reel/Frame 048650/0630 →
Continuity (1)
Related Publication 20200257793A1 · Aug 13, 2020