US5684950A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for authenticating users to multiple computer servers via a single sign-on
Assignee: Leidos Innovations Technology Inc.
•
Filing: 1996-09-23
•
Granted: 1997-11-04
•
Expires: 2016-09-23
Abstract
Abstract A method for authenticating an authorized user to multiple computer servers within a distributed computing environment after a single network sign-on is disclosed. In accordance with the method and system of the present invention, an authentication broker is provided within the distributed computing network. The authentication broker first receives an authentication request from a workstation. After a determination that the authentication request is valid, the authentication broker then issues a Kerberos Ticket Granting Ticket to the workstation. At this point, if there is a request by the workstation for accessing a Kerberos Ticket-based server within the distributed computing network, the authentication broker will issue a Kerberos Service Ticket to the workstation. Similarly, if there is a request by the workstation for accessing a passticket-based server within the distributed computing network, the authentication broker will issue a passticket to the workstation. Finally, if there is a request by the workstation for accessing a password-based server within the distributed computing network, the authentication broker will issue a password to the workstation. By this, accesses to all of the above servers within the distributed computing network can be granted via a single network authentication request.
Inventors
- 👤 Timothy S. Dare
- 👤 Eric B. Ek
- 👤 Gary L. Luckenbaugh
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 02:59
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0807; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/41; H04L63/0815
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
164 words
A method for authenticating a user with respect to multiple computer servers within a distributed computing network, said method comprising: providing an authentication broker within said distributed computing network; receiving an authentication request from a workstation at said authentication broker; issuing a Kerberos Ticket Granting Ticket to said workstation from said authentication broker after a determination that said authentication request is valid; issuing a Kerberos Service Ticket to said workstation from said authentication broker in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; issuing a passticket to said workstation from said authentication broker in response to an access request from said workstation to a passticket-based server within said distributed computing network; issuing a password to said workstation from said authentication broker in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 2
Independent Claim
164 words
A method for authenticating a user with respect to multiple computer servers within a distributed computing network, said method comprising: providing an authentication broker within said distributed computing network; receiving an authentication request from a workstation at said authentication broker; issuing a Kerberos Ticket Granting Ticket to said workstation from said authentication broker after a determination that said authentication request is valid; issuing a Kerberos Service Ticket to said workstation from said authentication broker in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; issuing a passticket to said workstation from said authentication broker in response to an access request from said workstation to a passticket-based server within said distributed computing network; issuing a password to said workstation from said authentication broker in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 3
Dependent Claim
40 words
The method for authenticating a user to multiple computer servers within a distributed computing network according to claim 1, wherein said step of receiving an authentication request further includes a step of receiving a user identification and an associated password.
Claim 4
Dependent Claim
44 words
The method for authenticating a user to multiple computer servers within a distributed computing network according to claim 1, wherein said step of issuing a Kerberos Service Ticket further includes a step of exchanging said Kerberos Ticket Granting Ticket for said Kerberos Service Ticket.
Claim 5
Dependent Claim
56 words
The method for authenticating a user to multiple computer servers within a distributed computing network according to claim 1, wherein said step of issuing a passticket further includes a step of exchanging said Kerberos Ticket Granting Ticket for a second Kerberos Service Ticket and a step of exchanging said second Kerberos Service Ticket for said passticket.
Claim 6
Dependent Claim
56 words
The method for authenticating a user to multiple computer servers within a distributed computing network according to claim 1, wherein said step of issuing a password further includes a step of exchanging said Kerberos Ticket Granting Ticket for a third Kerberos Service Ticket and a step of exchanging said third Kerberos Service Ticket for said password.
Claim 7
Dependent Claim
184 words
A computer program product stored on a computer readable medium for authenticating a user with respect to multiple computer servers within a distributed computing network, said computer product comprising: program code means for receiving an authentication request from a workstation at said authentication broker; program code means for issuing a Kerberos Ticket Granting Ticket to said workstation from said authentication broker after a determination that said authentication request is valid; program code means for issuing a Kerberos Service Ticket to said workstation from said authentication broker in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; program code means for issuing a passticket to said workstation from said authentication broker in response to an access request from said workstation to a passticket-based server within said distributed computing network; program code means for issuing a password to said workstation from said authentication broker in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 8
Dependent Claim
184 words
A computer program product stored on a computer readable medium for authenticating a user with respect to multiple computer servers within a distributed computing network, said computer product comprising: program code means for receiving an authentication request from a workstation at said authentication broker; program code means for issuing a Kerberos Ticket Granting Ticket to said workstation from said authentication broker after a determination that said authentication request is valid; program code means for issuing a Kerberos Service Ticket to said workstation from said authentication broker in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; program code means for issuing a passticket to said workstation from said authentication broker in response to an access request from said workstation to a passticket-based server within said distributed computing network; program code means for issuing a password to said workstation from said authentication broker in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 9
Dependent Claim
46 words
The computer program product for authenticating a user to multiple computer servers within a distributed computing network according to claim 6, wherein said program code means for receiving an authentication request further includes a program code means for receiving a user identification and an associated password.
Claim 10
Dependent Claim
50 words
The computer program product for authenticating a user to multiple computer servers within a distributed computing network according to claim 6, wherein said program code means for issuing a Kerberos Service Ticket further includes a program code means for exchanging said Kerberos Ticket Granting Ticket for said Kerberos Service Ticket.
Claim 11
Dependent Claim
64 words
The computer program product for authenticating a user to multiple computer servers within a distributed computing network according to claim 6, wherein said program code means for issuing a passticket further includes a program code means for exchanging said Kerberos Ticket Granting Ticket for a second Kerberos Service Ticket and a program code means for exchanging said second Kerberos Service Ticket for said passticket.
Claim 12
Dependent Claim
64 words
The computer program product for authenticating a user to multiple computer servers within a distributed computing network according to claim 6, wherein said program code means for issuing a password further includes a program code means for exchanging said Kerberos Ticket Granting Ticket for a third Kerberos Service Ticket and a program code means for exchanging said third Kerberos Service Ticket for said password.
Claim 13
Dependent Claim
145 words
An authentication broker for authenticating a user to multiple computer servers within a distributed computing network, said authentication broker comprising: means for receiving an authentication request from a workstation; means for issuing a Kerberos Ticket Granting Ticket to said workstation after a determination that said authentication request is valid; means for issuing a Kerberos Service Ticket to said workstation in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; means for issuing a passticket to said workstation in response to an access request from said workstation to a passticket-based server within said distributed computing network; means for issuing a password to said workstation in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 14
Dependent Claim
145 words
An authentication broker for authenticating a user to multiple computer servers within a distributed computing network, said authentication broker comprising: means for receiving an authentication request from a workstation; means for issuing a Kerberos Ticket Granting Ticket to said workstation after a determination that said authentication request is valid; means for issuing a Kerberos Service Ticket to said workstation in response to an access request from said workstation to a Kerberos Ticket-based server within said distributed computing network; means for issuing a passticket to said workstation in response to an access request from said workstation to a passticket-based server within said distributed computing network; means for issuing a password to said workstation in response to an access request from said workstation to a password-based server within said distributed computing network, such that accesses to all said servers are granted via a single network authentication request.
Claim 15
Dependent Claim
41 words
The authentication broker for authenticating a user to multiple computer servers within a distributed computing network according to claim 11, wherein said means for receiving an authentication request further includes a means for receiving a user identification and an associated password.
Claim 16
Dependent Claim
45 words
The authentication broker for authenticating a user to multiple computer servers within a distributed computing network according to claim 11, wherein said means for issuing a Kerberos Service Ticket further includes a means for exchanging said Kerberos Ticket Granting Ticket for said Kerberos Service Ticket.
Claim 17
Dependent Claim
57 words
The authentication broker for authenticating a user to multiple computer servers within a distributed computing network according to claim 11, wherein said means for issuing a passticket further includes a means for exchanging said Kerberos Ticket Granting Ticket for a second Kerberos Service Ticket and a means for exchanging said second Kerberos Service Ticket for said passticket.
Claim 18
Dependent Claim
57 words
The authentication broker for authenticating a user to multiple computer servers within a distributed computing network according to claim 11, wherein said means for issuing a password further includes a means for exchanging said Kerberos Ticket Granting Ticket for a third Kerberos Service Ticket and a means for exchanging said third Kerberos Service Ticket for said password.
References Cited (Backward Citations)
US4995112A
Cited
US5560008A
Cited
US5481720A
Cited
US5241594A
Cited
US5586260A
Cited
US5491752A
Cited
US5590199A
Cited
US5455953A
Cited
US5617570A
Cited
US5434918A
Cited
US5544322A
Cited
US5604490A
Cited
US5535276A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2000-11-03 | 2001-05-05 | 2001-11-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2004-11-03 | 2005-05-05 | 2005-11-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2008-11-03 | 2009-05-05 | 2009-11-04 | $7700.00 | Window Closed / Lapsed |