FIELD OF THE DISCLOSURE

The present disclosure concerns information technology (IT) security and more particularly relates to a secure registration method for newly installed communication applications.

BACKGROUND OF THE DISCLOSURE

With the ever-increasing sophistication of cyber-attacks and interceptions, the need for security in applications used by the enterprise has become paramount. It is important for organizations to be able to ensure that such applications, including voice, video, instant messaging and other applications are secure against unauthorized tampering. One of the ways this is done involves an application registration process that serves to authenticate the user and the security of the application. While a number of registration techniques have been proposed, they do not necessarily provide a sufficiently high degree of security, particularly for communications applications that are frequently used and are prime targets for attacks and interception.

SUMMARY OF THE DISCLOSURE

This disclosure provides a method for securely registering and activating an application downloaded to a user device of a user, the application being provided from an application store maintained by an application server of an enterprise, wherein a number is associated with the user device. The method comprises generating an activation code suitable for activating downloaded applications which are pending activation, storing the generated activation code on the application server, the first server not being accessible to the user and only being accessible to a jump server, enabling an administrator to access the jump server using two-factor authentication, accessing the first sever via the jump server, responding to a command by the administrator, provided through a remote connection between the jump server and the application server, by electronically communicating to the administrator any activation codes associated with applications pending activation, and completing registration and activation of the application downloaded by the user by providing a manually transferred code into the user device. The activation code associated with the application downloaded by the user is manually transferred from the administrator to the user.

In certain embodiments, the application is downloaded to the user via a second server different from the first server.

In certain implementations, the two-factor authentication is based on at least two of i) a knowledge factor, ii) a possession and iii) a biometric factor. The knowledge factor can be one of a password and personal identification number (PIN). The possession factor can be an identifier of a device.

In certain embodiments, all of the activities of the administrator on or through the jump server are logged.

The present disclosure also provides A method of securely registering and activating an application at a user device in an organization having an administrator which comprises verifying an identity of the administrator using 2-factor authentication; and providing access to a secure server to the administrator upon acceptance of the 2-factor authentication; and enabling the administrator to obtain an activation code from the secure server for activating the application, wherein the administrator thereby has the activation code for communication to a user of the user device for activating the application.

The method can further comprise continually logging activity of the administrator. The two-factor authentication can be based on at least two of i) a knowledge factor, ii) a possession and iii) a biometric factor.

The present disclosure further provides a method of securely registering and activating an application at a user device in an organization having an administrator which comprises generating an activation code for activating the application on the user device; and responding to a command by the administrator, provided through a remote connection established from a jump server accessible to the administrator, by electronically communicating to the administrator the activation code associated with the application at the user device, wherein upon receiving the output activation code, the administrator communicates the activation code to the user device for registering and activating the application.

The activation code can be stored in association with an identifier of the user device having the application to be registered and activated. The identifier of the user device can a phone number or an IP address.

In certain implementations, the administrator communicates the activation code to the user device via link in a text message or an email.

These and other aspects, features, and advantages can be appreciated from the following description of certain embodiments of the invention and the accompanying drawing figures and claims.

