US5481720A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Flexible interface to authentication services in a distributed data processing environment
Assignee: International Business Machines Corp
•
Filing: 1994-09-14
•
Granted: 1996-01-02
•
Expires: 2014-09-14
Abstract
Abstract In a distributed data processing system, the authentication of a process at one node for the use of a service at another node is performed in a facility that is separate from the requestor and service process. The separate facility is also replaceable, thereby allowing different authentication policies to be implemented within the distributed data processing system. The requesting process and the service process merely pass the authentication information between themselves without attempting to interpret the work of the separate authentication facility. In addition to authenticating the requestor to the service, the service is also authenticated to the requestor.
Inventors
- 👤 Larry K. Loucks
- 👤 Todd A. Smith
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 04:45
CPC Classifications
G; G06; G06F; G06F9/00; G06F9/06; G06F9/46; G06F9/468; G06F21/00; G06F21/30; G06F21/31
Claims Analysis
Total Claims: 6
Claim 1
Independent Claim
202 words
A system for authenticating a requestor process at a first node, of a service process running at a second node in a distributed data processing system, comprising: a first machine at said first node; a second machine at a second node; and communication means interconnecting said first and said second machines; said first machine executing an operating system; said requestor process, and a first authentication agent program defining a corresponding first authentication policy independently of said operating system; said first machine further including means for constructing authentication information and a first authentication acknowledgement supporting said first authentication policy; said second machine further executing an operating system; said service process, and a second authentication agent program defining a corresponding second authentication policy independently of said operating system; said second machine further including means for receiving and processing said authentication information communication from said first machine to said second machine over said communication means; means for acquiring and transmitting a second authentication acknowledgement on said communication means from said second machine to said first machine; and wherein said first machine further includes means for comparing said first authentication acknowledgement and said second received authentication acknowledgement for determining a second authentication of said service process.
Claim 2
Independent Claim
202 words
A system for authenticating a requestor process at a first node, of a service process running at a second node in a distributed data processing system, comprising: a first machine at said first node; a second machine at a second node; and communication means interconnecting said first and said second machines; said first machine executing an operating system; said requestor process, and a first authentication agent program defining a corresponding first authentication policy independently of said operating system; said first machine further including means for constructing authentication information and a first authentication acknowledgement supporting said first authentication policy; said second machine further executing an operating system; said service process, and a second authentication agent program defining a corresponding second authentication policy independently of said operating system; said second machine further including means for receiving and processing said authentication information communication from said first machine to said second machine over said communication means; means for acquiring and transmitting a second authentication acknowledgement on said communication means from said second machine to said first machine; and wherein said first machine further includes means for comparing said first authentication acknowledgement and said second received authentication acknowledgement for determining a second authentication of said service process.
Claim 3
Dependent Claim
16 words
The apparatus of claim 1 wherein said first authentication policy differs from said second authentication policy.
Claim 4
Independent Claim
162 words
A method for authentication a requestor process at a first node of a service process running at a second node in a distributed data processing system comprising: executing in a first machine an operating system; said requestor process; and a first authentication agent program defining a corresponding first authentication policy independently of said operating system; constructing with said first machine authentication information and a first authentication acknowledgement supporting said first authentication policy; executing in a second machine an operating system; a service process; and a second authentication agent program defining a corresponding second authentication policy independently of said operating system; receiving and processing with said second machine said authentication information communicated from said machine to said second machine; acquiring and transmitting with said second machine a second authentication acknowledgement from said second machine to said first machine; and comparing with said first machine said first authentication acknowledgement and said second received authentication acknowledgement for determining a second authentication of said service process.
Claim 5
Independent Claim
162 words
A method for authentication a requestor process at a first node of a service process running at a second node in a distributed data processing system comprising: executing in a first machine an operating system; said requestor process; and a first authentication agent program defining a corresponding first authentication policy independently of said operating system; constructing with said first machine authentication information and a first authentication acknowledgement supporting said first authentication policy; executing in a second machine an operating system; a service process; and a second authentication agent program defining a corresponding second authentication policy independently of said operating system; receiving and processing with said second machine said authentication information communicated from said machine to said second machine; acquiring and transmitting with said second machine a second authentication acknowledgement from said second machine to said first machine; and comparing with said first machine said first authentication acknowledgement and said second received authentication acknowledgement for determining a second authentication of said service process.
Claim 6
Dependent Claim
26 words
The method of claim 3 further including deleting said second authentication agent program and substituting therefore a corresponding third authentication policy independently of said operating system.
References Cited (Backward Citations)
US4317957A
Cited
US4423287A
Cited
US4578530A
Cited
US4484306A
Cited
US4652990A
Cited
US4672572A
Cited
US4694492A
Cited
US4685055A
Cited
US4815031A
Cited
US4800488A
Cited
EP0268141A2
Cited
US4933969A
Cited
US4858117A
Cited
US4980913A
Cited
US5077694A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1999-01-01 | 1999-07-03 | 2000-01-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2003-01-01 | 2003-07-03 | 2004-01-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2007-01-01 | 2007-07-03 | 2008-01-02 | $7700.00 | Window Closed / Lapsed |