US6178511B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Coordinating user target logons in a single sign-on (SSO) environment
Assignee: International Business Machines Corp
•
Filing: 1998-04-30
•
Granted: 2001-01-23
•
Expires: 2018-04-30
Abstract
Abstract A single sign-on (SSO) mechanism to enable a given user to access a target application on a target resource in a distributed computer enterprise. One or more configuration directives each identifying a given logon process and any associated methods required to access the target application on the target resource are stored in a preferably global-accessible database (CIM). For each of a set of users, a preferably global-accessible database (PKM) stores user-specific and application-specific information enabling the user to access and logon to one or more target resources. During a particular session, a logon coordinator (LC) mechanism coordinates given user information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process and the application-specific information.
Inventors
- 👤 Richard Jay Cohen
- 👤 Richard Allen Forsberg
- 👤 Paul A. Kallfelz, Jr.
- 👤 John Robert Meckstroth
- 👤 Christopher James Pascoe
- 👤 Andrea Lynn Snow-Weaver
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 01:41
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/10; H04L63/102; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; G06F21/335; G06F21/41; H04L63/08; H04L63/0815
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
146 words
A method of single sign-on to multiple target resources in a computer enterprise environment, wherein at least some target resources normally require a given logon process to access applications on the target resource, comprising the steps of: for each of a set of target resources having different logon processes, storing configuration directives identifying the given logon process and methods required to access a particular application on the target resource; for each of a set of users, storing user-specific information that enables the user to access and logon to one or more of the target resources; and during a logon attempt by a given user with respect to a target application on one of the set of target resources, coordinating given user information with at least one given configuration directive to enable the given user to logon to the target application without specifying the given logon process.
Claim 2
Independent Claim
146 words
A method of single sign-on to multiple target resources in a computer enterprise environment, wherein at least some target resources normally require a given logon process to access applications on the target resource, comprising the steps of: for each of a set of target resources having different logon processes, storing configuration directives identifying the given logon process and methods required to access a particular application on the target resource; for each of a set of users, storing user-specific information that enables the user to access and logon to one or more of the target resources; and during a logon attempt by a given user with respect to a target application on one of the set of target resources, coordinating given user information with at least one given configuration directive to enable the given user to logon to the target application without specifying the given logon process.
Claim 3
Dependent Claim
24 words
The method as described in claim 1 further including the step of validating a user id/password of the given user during the logon attempt.
Claim 4
Dependent Claim
24 words
The method as described in claim 1 further including the step of storing state information associating the given user with the given target application.
Claim 5
Dependent Claim
28 words
The method as described in claim 3 further including the step of using the state information stored to facilitate access to the target application in a subsequent session.
Claim 6
Dependent Claim
29 words
The method as described in claim 3 further including the step of using the state information to determine whether the given user has authority to perform a given operation.
Claim 7
Dependent Claim
16 words
The method as described in claim 5 wherein the given operation is a change password operation.
Claim 8
Dependent Claim
16 words
The method as described in claim 6 further including the step of performing the given operation.
Claim 9
Dependent Claim
22 words
The method as described in claim 1 wherein a particular configuration directive is generated by a provider of a given target application.
Claim 10
Independent Claim
111 words
A method of enabling single sign-on access to a target application on a target resource in a distributed computer enterprise, comprising the steps of: generating a configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; for each of a set of users, storing user-specific and application-specific information that enables the user to access and logon to one or more target resources; and during a session, coordinating given user information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process and the application-specific information.
Claim 11
Independent Claim
111 words
A method of enabling single sign-on access to a target application on a target resource in a distributed computer enterprise, comprising the steps of: generating a configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; for each of a set of users, storing user-specific and application-specific information that enables the user to access and logon to one or more target resources; and during a session, coordinating given user information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process and the application-specific information.
Claim 12
Dependent Claim
19 words
The method as described in claim 9 wherein the given action is a user logon to a target resource.
Claim 13
Dependent Claim
16 words
The method as described in claim 9 wherein the given action is a change password operation.
Claim 14
Dependent Claim
17 words
The method as described in claim 9 wherein the configuration directive is defined by a template file.
Claim 15
Dependent Claim
17 words
The method as described in claim 9 wherein the configuration directive is stored in a local database.
Claim 16
Dependent Claim
18 words
The method as described in claim 9 wherein the user-specific and application-specific information is stored in a database.
Claim 17
Independent Claim
112 words
A system architecture for enabling access to a target application on a target resource in a distributed computer enterprise, comprising: means for storing at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for storing user-specific identifying information for each of a set of users, the user-specific identifying information enabling a given user to access and logon to one or more target resources; and means for coordinating given user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
Claim 18
Independent Claim
112 words
A system architecture for enabling access to a target application on a target resource in a distributed computer enterprise, comprising: means for storing at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for storing user-specific identifying information for each of a set of users, the user-specific identifying information enabling a given user to access and logon to one or more target resources; and means for coordinating given user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
Claim 19
Dependent Claim
20 words
The system architecture as described in claim 15 wherein the given action is a user logon to a target resource.
Claim 20
Dependent Claim
17 words
The system architecture as described in claim 15 wherein the given action is a change password operation.
Claim 21
Dependent Claim
19 words
The system architecture as described in claim 15 wherein the given action is a logoff from a target resource.
Claim 22
Dependent Claim
19 words
The system architecture as described in claim 15 wherein the means for storing the configuration directive is a database.
Claim 23
Dependent Claim
20 words
The system architecture as described in claim 15 wherein the means for storing the user-specific identifying information is a database.
Claim 24
Dependent Claim
120 words
A computer program product in a computer-readable medium operable on a computer for enabling access to a target application on a target resource in a distributed computer enterprise, comprising: means running on the computer for storing at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for retrieving user-specific identifying information for a given user to enable the given user to access and logon to one or more target resources; and means for coordinating the retrieved user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
Claim 25
Dependent Claim
120 words
A computer program product in a computer-readable medium operable on a computer for enabling access to a target application on a target resource in a distributed computer enterprise, comprising: means running on the computer for storing at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for retrieving user-specific identifying information for a given user to enable the given user to access and logon to one or more target resources; and means for coordinating the retrieved user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
Claim 26
Dependent Claim
140 words
A computer connectable in a distributed computer enterprise, comprising: at least one processor; a memory; a computer program supported in the memory and executable by the at least one processor for enabling access to a target application on a target resource in the distributed computer enterprise, the computer program comprising: means for storing in the memory at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for retrieving user-specific identifying information for a given user to enable the given user to access and logon to one or more target resources; and means for coordinating the retrieved user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
Claim 27
Dependent Claim
140 words
A computer connectable in a distributed computer enterprise, comprising: at least one processor; a memory; a computer program supported in the memory and executable by the at least one processor for enabling access to a target application on a target resource in the distributed computer enterprise, the computer program comprising: means for storing in the memory at least one configuration directive identifying a given logon process and any associated methods required to access the target application on the target resource; means for retrieving user-specific identifying information for a given user to enable the given user to access and logon to one or more target resources; and means for coordinating the retrieved user-specific identifying information with the configuration directive to enable the given user to perform a given action with respect to the target application without specifying the given logon process.
References Cited (Backward Citations)
US4604686A
Cited
US4937036A
Cited
US5047923A
Cited
US5369778A
Cited
US5021949A
Cited
US4999766A
Cited
US5347632A
Cited
US5442771A
Cited
US5594910A
Cited
US5226172A
Cited
US5442342A
Cited
US5241594A
Cited
US5329619A
Cited
GB2281645A
Cited
US5434918A
Cited
US5564043A
Cited
US5579479A
Cited
EP0751453A1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-01-23 | 2004-07-24 | 2005-01-23 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-01-23 | 2008-07-24 | 2009-01-23 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-01-23 | 2012-07-24 | 2013-01-23 | $7700.00 | Window Closed / Lapsed |