US5706349A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Authenticating remote users in a distributed environment
Assignee: International Business Machines Corp
•
Filing: 1995-03-06
•
Granted: 1998-01-06
•
Expires: 2015-03-06
Abstract
Abstract In a distributed computing environment, a token is issued to a remote user if a security mechanism initially can determine that the remote user is who he claims to be. Thereafter, a connection between a remote user and an application server requires the application server to first verify that a token associated with a connection request was issued by the security mechanism. If no token is associated with a connection request, or if any token associated with the request was not issued by the security mechanism, the connection is refused.
Inventors
- 👤 Radhakrishna Aditham
- 👤 Philip Chang
- 👤 Paul H. Kramer
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 16:41
CPC Classifications
G; G06; G06F; G06F15/00; G06F15/16; H; H04; H04L; H04L63/00; H04L63/08; H04L63/0807; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/60; G06F21/62; G06F21/6218; G06F21/6236; H04L9/00; H04L9/32; H04L9/321; H04L9/3213
Claims Analysis
Total Claims: 26
Claim 1
Independent Claim
122 words
A method for managing communications between remote users and an application server in a distributed computing environment, the application server supported in a local processing system having a local authentication facility, comprising the steps of: (a) issuing a token to each remote user whose identity is authenticated in the local processing system using the local authentication facility; (b) in response to a call from a remote user, determining whether a token associated with the call was issued to the remote user authenticated by the local authentication facility of the local processing system; and (c) connecting the remote user to the application server if the token was issued to the remote user authenticated by the local authentication facility of the local processing system.
Claim 2
Independent Claim
122 words
A method for managing communications between remote users and an application server in a distributed computing environment, the application server supported in a local processing system having a local authentication facility, comprising the steps of: (a) issuing a token to each remote user whose identity is authenticated in the local processing system using the local authentication facility; (b) in response to a call from a remote user, determining whether a token associated with the call was issued to the remote user authenticated by the local authentication facility of the local processing system; and (c) connecting the remote user to the application server if the token was issued to the remote user authenticated by the local authentication facility of the local processing system.
Claim 3
Dependent Claim
35 words
The method as described in claim 1 wherein the identity of the remote user is authenticated by determining whether a user name and password are present in a user registry of the local processing system.
Claim 4
Dependent Claim
33 words
The method as described in claim 2 wherein the user name and password are provided to the local processing system in a data string forming a part of a binding handle request message.
Claim 5
Dependent Claim
18 words
The method as described in claim 3 wherein the data string also includes a universal unique identifier (UUID).
Claim 6
Dependent Claim
42 words
The method as described in claim 4 wherein the token and the UUID are stored in the local processing system to enable determination of whether the token associated with the call was issued to the remote user by the local processing system.
Claim 7
Dependent Claim
33 words
The method as described in claim 1 wherein the remote user is refused connection to the application server if the token was not issued to the remote user by the local processing system.
Claim 8
Dependent Claim
20 words
The method as described in claim 1 wherein the token is a random string associated with a particular computing session.
Claim 9
Independent Claim
143 words
A method, using a security mechanism, for managing communications between remote users and an application server in a distributed computing environment, wherein the security mechanism and the application server are supported in a local processing system having a local authentication facility, comprising the steps of: (a) issuing one or more tokens to a remote user if the remote user's identity is authenticated by the security mechanism using the local authentication facility; (b) in response to a call from a remote user, determining whether a token associated with the call was issued to the remote user by the security mechanism; (c) connecting the remote user to the application server if the token was issued to the remote user by the security mechanism; and (d) refusing connection to the application server if the token was not issued to the remote user by the security mechanism.
Claim 10
Independent Claim
143 words
A method, using a security mechanism, for managing communications between remote users and an application server in a distributed computing environment, wherein the security mechanism and the application server are supported in a local processing system having a local authentication facility, comprising the steps of: (a) issuing one or more tokens to a remote user if the remote user's identity is authenticated by the security mechanism using the local authentication facility; (b) in response to a call from a remote user, determining whether a token associated with the call was issued to the remote user by the security mechanism; (c) connecting the remote user to the application server if the token was issued to the remote user by the security mechanism; and (d) refusing connection to the application server if the token was not issued to the remote user by the security mechanism.
Claim 11
Dependent Claim
34 words
The method as described in claim 8 wherein the remote user's identity is authenticated by determining whether a user name and password are present in a user registry associated with the local authentication facility.
Claim 12
Dependent Claim
32 words
The method as described in claim 9 wherein the user name and password are provided to the security mechanism in a data string forming a part of a binding handle request message.
Claim 13
Dependent Claim
18 words
The method as described in claim 10 wherein the data string also includes a universal unique identifier (UUID).
Claim 14
Dependent Claim
23 words
The method as described in claim 11 wherein the token and the UUID are maintained in a storage associated with the security mechanism.
Claim 15
Dependent Claim
19 words
The method as described in claim 8 wherein each token issued to the remote user is a random string.
Claim 16
Dependent Claim
75 words
The method as described in claim 8 wherein the step of determining whether a token associated with the call was issued to the remote user by the security mechanism comprises the steps of: transmitting the token from the remote user to the application server; having the application server send the token to the security mechanism; and searching a database associated with the security mechanism to determine if the token was originated by the security mechanism.
Claim 17
Independent Claim
114 words
A method to enable an application server in a distributed network environment to verify the identity of remote users, the application server supported in a local processing system having a local authentication facility, comprising the steps of: (a) having a remote user transmit a data string to a security mechanism supported in the local processing system, the data string including at least some information uniquely identifying the remote user; (b) having the security mechanism issue a token to a remote user if the remote user's identity is authenticated by the security mechanism using the local authentication facility; and (c) using the token to control further connection of the remote user to the application server.
Claim 18
Independent Claim
114 words
A method to enable an application server in a distributed network environment to verify the identity of remote users, the application server supported in a local processing system having a local authentication facility, comprising the steps of: (a) having a remote user transmit a data string to a security mechanism supported in the local processing system, the data string including at least some information uniquely identifying the remote user; (b) having the security mechanism issue a token to a remote user if the remote user's identity is authenticated by the security mechanism using the local authentication facility; and (c) using the token to control further connection of the remote user to the application server.
Claim 19
Dependent Claim
23 words
The method as described in claim 15 wherein the data string includes a user name, a user password and a random bit string.
Claim 20
Dependent Claim
14 words
The method as described in claim 16 wherein the data string is an object.
Claim 21
Dependent Claim
77 words
In a network providing a distributed computing environment in which users access distributed resources and process applications, the network including a local processing system supporting an application server and having a local authentication facility, comprising: means for issuing a token to each remote user whose identity is authenticated using the local authentication facility; and means responsive to receipt of the token by the application server for controlling subsequent connection of the remote user to the application server.
Claim 22
Dependent Claim
77 words
In a network providing a distributed computing environment in which users access distributed resources and process applications, the network including a local processing system supporting an application server and having a local authentication facility, comprising: means for issuing a token to each remote user whose identity is authenticated using the local authentication facility; and means responsive to receipt of the token by the application server for controlling subsequent connection of the remote user to the application server.
Claim 23
Dependent Claim
100 words
A computer network providing a distributed computing environment in which users access distributed resources and process applications, comprising: a local computer system having an application server and supporting an authentication facility; a client process; a security protocol means to enable the application server to authenticate the client process, comprising: means supported on the local computer system for issuing a token to the client process if the identity of the client process is authenticated using the authentication facility; and means responsive to receipt of the token by the application server for controlling connection of the client process to the application server.
Claim 24
Dependent Claim
100 words
A computer network providing a distributed computing environment in which users access distributed resources and process applications, comprising: a local computer system having an application server and supporting an authentication facility; a client process; a security protocol means to enable the application server to authenticate the client process, comprising: means supported on the local computer system for issuing a token to the client process if the identity of the client process is authenticated using the authentication facility; and means responsive to receipt of the token by the application server for controlling connection of the client process to the application server.
Claim 25
Dependent Claim
127 words
A program storage device readable by a processor and tangibly embodying a program of instructions executable by the processor to perform a method for managing communications in a distributed computing environment including an application server and one or more client processes, the application server supported in a local processing system having an authentication facility, the method for managing communications comprising the steps of: (a) issuing a token to a client process if the identity of the client process is authenticated using the authentication facility; (b) in response to a call request from a client process, determining where a token associated with the call request originated; and (c) enabling connection of the client process to the application server if the token originated from authentication by the authentication facility.
Claim 26
Dependent Claim
127 words
A program storage device readable by a processor and tangibly embodying a program of instructions executable by the processor to perform a method for managing communications in a distributed computing environment including an application server and one or more client processes, the application server supported in a local processing system having an authentication facility, the method for managing communications comprising the steps of: (a) issuing a token to a client process if the identity of the client process is authenticated using the authentication facility; (b) in response to a call request from a client process, determining where a token associated with the call request originated; and (c) enabling connection of the client process to the application server if the token originated from authentication by the authentication facility.
References Cited (Backward Citations)
US4349695A
Cited
US5323146A
Cited
US5339403A
Cited
US5196840A
Cited
US5226079A
Cited
US5220603A
Cited
US5249230A
Cited
US5235642A
Cited
US5349642A
Cited
US5491752A
Cited
US5454038A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-01-05 | 2001-07-07 | 2002-01-06 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-01-05 | 2005-07-07 | 2006-01-06 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-01-05 | 2009-07-07 | 2010-01-06 | $7700.00 | Window Closed / Lapsed |