Patent US5764890A successfully refreshed from Google Patents.
US5764890A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for adding a secure network server to an existing computer network
Assignee: Microsoft Technology Licensing LLC
•
Filing: 1997-07-23
•
Granted: 1998-06-09
•
Expires: 2017-07-23
Abstract
Abstract A method and system for adding a secured network server to an existing network for access by a client thereof, wherein the added server does not possess a database of authentication credentials. The client is first authenticated for access to the added server by passing authentication requests received from the client to an authenticating agent having a database of authentication credentials, which may include information from a bindery comprising users, groups and passwords. The responses from the authenticating agent are then evaluated, and if the response indicates validity, the client is the granted access to the added server. Database services are provided to the authenticated client by first evaluating database requests received from the client. Requests seeking information maintained by the authenticating agent are handled by passing the requests to the authenticating agent and using its response to reply to the client.
Inventors
- 👤 Daniel S. Glasser
- 👤 Thomas R. Reardon
- 👤 Aaron W. Ogus
- 👤 Samuel J. McKelvie
- 👤 George Joy
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-28 17:35
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H04L63/0884; H04L63/10; H04L63/108; G06F2211/00; G06F2211/007
Claims Analysis
Total Claims: 16
Claim 1
Independent Claim
200 words
In a computer network system, a method of authenticating a user at a client workstation for access to a network server comprising the steps of: connecting as separate nodes on a common communications link an at least one client workstation, a network server and an authenticating agent; logging in by the network server as a user connection to the authenticating agent, which includes a database of valid client credentials; receiving a request at the network server for access thereto from the client workstation, the request including authentication credentials of the user; verifying the request by passing the credentials of the user through the network server to the authenticating agent by modifying the form of the request from a request for access to a request for authentication verification; receiving a response from the authenticating agent at the network server, the response including information indicative of the validity or invalidity of the credentials; granting the user access to the network server when the response indicates the request contained valid credentials of the user, and; logging off by the network server as a user connection to the authenticating agent when the connection has not been in use for a pre-defined duration of time.
Claim 2
Dependent Claim
200 words
In a computer network system, a method of authenticating a user at a client workstation for access to a network server comprising the steps of: connecting as separate nodes on a common communications link an at least one client workstation, a network server and an authenticating agent; logging in by the network server as a user connection to the authenticating agent, which includes a database of valid client credentials; receiving a request at the network server for access thereto from the client workstation, the request including authentication credentials of the user; verifying the request by passing the credentials of the user through the network server to the authenticating agent by modifying the form of the request from a request for access to a request for authentication verification; receiving a response from the authenticating agent at the network server, the response including information indicative of the validity or invalidity of the credentials; granting the user access to the network server when the response indicates the request contained valid credentials of the user, and; logging off by the network server as a user connection to the authenticating agent when the connection has not been in use for a pre-defined duration of time.
Claim 3
Dependent Claim
32 words
The method of claim 1 further comprising the step of the network server authenticating a plurality of users by connecting to the authenticating agent through a single connection of the communications link.
Claim 4
Dependent Claim
49 words
The method of claim 1 wherein the step of logging into the authenticating agent includes the step of sharing an existing connection of the common communications link from the network server to the authenticating agent when a user of the network server is already logged into the authenticating agent.
Claim 5
Dependent Claim
37 words
The method of claim 1 wherein the step of the network server's logging into the authenticating agent includes the step of creating the network server's own connection when a connection to the authenticating agent is not present.
Claim 6
Dependent Claim
17 words
The method of claim 1 wherein the authentication credentials includes the user ID and an encrypted password.
Claim 7
Dependent Claim
27 words
The method of claim 1 further comprising the step of denying the user access to the network server when the response indicates the request contained invalid credentials.
Claim 8
Dependent Claim
21 words
The method of claim 1 further comprising the step of returning the response from the network server to the client workstation.
Claim 9
Dependent Claim
72 words
The method of claim 1 wherein the modification of the form of a request for access, the request being formatted in a data packet having a destination address of the network server therein, includes the steps of: modifying the data packet to change the destination address from that of the network server to that of the authenticating agent, and transmitting the modified data packet on the communications link to the authenticating agent.
Claim 10
Dependent Claim
211 words
In a computer network system having at least one client workstation and one authenticating agent as separate nodes on a communications link, a method of adding a network server to the network for secured access by the client workstation, wherein the added server does not possess a database of authentication credentials, comprising the steps of: adding the network server as a separate node on the common communications link without modifying existing software maintained by either the client workstation or the authenticating agent; logging the network server into the authenticating agent as a client of the authenticating agent; providing an authentication mechanism to users desiring access to the added network server, the authenticating mechanism having the ability to modify the request for access into a request for verification of credentials, and to verify the credentials of the client workstation with the credentials maintained by the authenticating agent; providing database services to the client workstation from the added network server by receiving, at the server, database requests from the client workstation, selectively passing to the authenticating agent those requests requiring database information maintained by the authenticating agent, and returning information from the authenticating agent to the client workstation and; logging the server off of the authenticating agent after a selected period of inactivity.
Claim 11
Dependent Claim
211 words
In a computer network system having at least one client workstation and one authenticating agent as separate nodes on a communications link, a method of adding a network server to the network for secured access by the client workstation, wherein the added server does not possess a database of authentication credentials, comprising the steps of: adding the network server as a separate node on the common communications link without modifying existing software maintained by either the client workstation or the authenticating agent; logging the network server into the authenticating agent as a client of the authenticating agent; providing an authentication mechanism to users desiring access to the added network server, the authenticating mechanism having the ability to modify the request for access into a request for verification of credentials, and to verify the credentials of the client workstation with the credentials maintained by the authenticating agent; providing database services to the client workstation from the added network server by receiving, at the server, database requests from the client workstation, selectively passing to the authenticating agent those requests requiring database information maintained by the authenticating agent, and returning information from the authenticating agent to the client workstation and; logging the server off of the authenticating agent after a selected period of inactivity.
Claim 12
Dependent Claim
28 words
The method of claim 9 further comprising the step of authenticating by the network server a plurality of the users using a single connection to the authenticating agent.
Claim 13
Dependent Claim
53 words
The method of claim 9 further comprising the step of one or more of the users logging into the authenticating agent by an existing connection to the authenticating agent through the common communications link when another one or more of the users of the network server are already logged into the authenticating agent.
Claim 14
Dependent Claim
43 words
The method of claim 9 further comprising the step of one or more of the users logging into the authenticating agent by creating the network server's own connection through the common communications link when a connection to the authenticating agent is not present.
Claim 15
Dependent Claim
17 words
The method of claim 9 wherein the authentication credentials includes the user ID and an encrypted password.
Claim 16
Dependent Claim
86 words
The method of claim 9 wherein at least those requests requiring database information maintained by the authenticating agent are formatted in data packets, each having a destination address of the network server therein, and the step of selectively passing requests to the authenticating agent includes the steps of: 1) modifying the data packet to change the destination address from that of the network server to that of the authenticating agent, and 2) transmitting the modified data packet on the common communications link to the authenticating agent.
References Cited (Backward Citations)
US4924378A
Cited
US5481720A
Cited
US5560008A
Cited
US5475625A
Cited
US5241594A
Cited
US5235642A
Cited
US5506961A
Cited
US5329619A
Cited
US5586260A
Cited
US5349643A
Cited
US5455953A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-06-08 | 2001-12-08 | 2002-06-09 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-06-08 | 2005-12-08 | 2006-06-09 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-06-08 | 2009-12-08 | 2010-06-09 | $7700.00 | Window Closed / Lapsed |