 |
|
|
|
|
|
 Title: |
US7113994:
System and method of proxy authentication in a secured network
[ Derwent Title ]
|
| Country: |
US United States of America
|
| |
| Inventor: |
Swift, Michael M.; Seattle, WA, United States of America
Amit, Neta; Haifa, Israel
Ward, Richard B.; Redmond, WA, United States of America
|
| Assignee: |
Microsoft Corporation, Redmond, WA, United States of America
other patents from MICROSOFT CORPORATION (373780) (approx. 3,197)
News, Profiles, Stocks and More about this company
|
| Published / Filed: |
2006-09-26
/ 2000-01-24
|
| Application Number: |
US2000000490199
|
| IPC Code: |
Advanced:
G06F 15/16;
Core:
more...
|
| ECLA Code: |
G06F21/00N5A2C;
|
| U.S. Class: |
Current:
709/229;
707/009;
707/010;
709/200;
709/227;
715/234;
Original:
709/229;
709/200;
707/009;
707/010;
707/513;
395/187.01;
|
| Field of Search: |
707/201,3,7,104.1,10,9,104
713/201,153,151,168
395/187.01,186,200.5
|
| Priority Number: |
| 2000-01-24 |
US2000000490199 |
|
| Abstract: |
A method of controlling access to network services enables an authorized proxy client to access a service on behalf of a user. To permit the client to function as a proxy, the user registers proxy authorization information with a trusted security server. The proxy authorization information identifies the proxy client and specifies the extent of proxy authority granted to the proxy client. When the proxy client wants to access a target service on behalf of the user, it sends a proxy request to the trusted security server. The trusted security server checks the proxy authorization information of the user to verify whether the request is within the proxy authority granted to the proxy client. If so, the trusted security server returns to the proxy client a data structure containing information recognizable by the target service to authenticate the proxy client for accessing the target service on behalf of the user.
|
| Attorney, Agent or Firm: |
Lee & Hayes, PLLC ;
|
| Primary / Asst. Examiners: |
Rones, Charles; Ortiz, Belix M.
|
| INPADOC Legal Status: |
Show legal status actions
Family Legal Status Report
|
| Family: |
Show 2 known family members
|
First Claim:
Show all 20 claims |
1. A method of enabling a proxy client in a secured network to access a target service on behalf of a user, comprising the steps of: registering proxy authorization information regarding the user with a trusted security server, the proxy authorization information identifying the proxy client and an extent of proxy authorization granted the proxy client by the user; submitting, by the proxy client, a proxy request to the trusted security server requesting access to the target service on behalf of the user; comparing, by the trusted security server, the proxy request with the registered proxy authorization information of the user to determine whether to grant the proxy request; issuing, by the trusted security service, a data structure containing authentication data recognizable by the target service for authenticating the proxy client for accessing the target service on behalf of the user, if it is determined to grant the proxy request.
|
| Background / Summary: |
Show background / summary
|
| Drawing Descriptions: |
Show drawing descriptions
|
| Description: |
Show description
|
| Forward References: |
Show 4 U.S. patent(s) that reference this one
|
|
|
|
|
|
|
| Foreign References: |
None
|
| Other References: |
J. Kohl and C. Neuman: Request for Comments RFC1510—“The Kerberos Network Authentication Service” Sep. 1993, available at ftp://ftp.isi.edu/in-notes/rfc1510.txt (accessed on Nov. 21, 2000).
B. Clifford Neuman and Theodore Ts'o: “Kerberos: An Authentication Service for Computer Networks”, USC/ISI Technical Report No. ISI/RS-94-39: Copyright 1994 Institute of Electrical and Electronics Engineers, IEEE Communications Magazine, vol. 32, No. 9, pp. 33-38, Sep. 1994.
(6 pages)
Cited by 44 patents
[ISI abstract]
“Windows 2000 Kerberos Authentication” Microsoft Windows NT Server, White Paper, Copyright 1999 Microsoft Corporation.
Wei Hu “DCE Security Programming”, Copyright 1995, O'Reilly & Associates, Inc.
|
| Continuity Data: |
| Application Number | Filed | Notes |
|---|
|
|
US2006000424517 | 2006-06-15 | is a
continuation of |
|
>US2000000490199<
| 2000-01-24 |
(pending)
[presumed granted]
|
| |
US7113994 issued 2006-09-26 System and method of proxy authentication in a secured network
|
|
|
|
 Nominate this for the Gallery...
|
|
