US6182227B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Lightweight authentication system and method for validating a server access request
Assignee: Trend Micro Inc
•
Filing: 1998-06-22
•
Granted: 2001-01-30
•
Expires: 2018-06-22
Abstract
Abstract A method of validating a request to access a target server in a computer network having an open, trusted database. The method begins when a request to access the target server is received at a host from which the scheme is supported. In response, a query is initiated to the trusted database to identify a technical, administrative or other contact person that may authorize the access request. In the Internet, the trusted database may be the WHOIS database that includes second level domain name information. A second query (e.g., an e-mail) is then launched to the identified contact. The e-mail preferably includes a URL and a key. The URL identifies a response Web page interface that is accessible upon entry of the key. If the identified contact accesses the Web page interface, he or she may then authorize the access request, deny the access request, or indicate under what conditions the request may occur. The invention takes advantage of existing Internet infrastructure and methods to provide a robust lightweight authentication mechanism.
Inventors
- 👤 Steven Cameron Blair
- 👤 Sebastian Hassinger
- 👤 II William W. Hurley
- 👤 William Meyer Smith
- 👤 John J. E. Turek
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-01 20:51
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6218; G06Q; G06Q20/00; G06Q20/38; G06Q20/382; G06F2221/00; G06F2221/21; G06F2221/2115; H04L63/18
Claims Analysis
Total Claims: 31
Claim 1
Independent Claim
106 words
A method of validating a request to access a target server in a computer network having a trusted shared resource, comprising the steps of: responsive to a request to access the target server, initiating a first query to the trusted shared resource to identify a contact that is trusted to respond to the access request; initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a key; responsive to entry of the key by the identified contact, generating a response to the access request; and generating a transaction record of the access request and the response.
Claim 2
Independent Claim
106 words
A method of validating a request to access a target server in a computer network having a trusted shared resource, comprising the steps of: responsive to a request to access the target server, initiating a first query to the trusted shared resource to identify a contact that is trusted to respond to the access request; initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a key; responsive to entry of the key by the identified contact, generating a response to the access request; and generating a transaction record of the access request and the response.
Claim 3
Dependent Claim
19 words
The method as described in claim 1 wherein the response includes an indication that the access request is authorized.
Claim 4
Dependent Claim
14 words
The method as described in claim 2 wherein the indication includes a given condition.
Claim 5
Dependent Claim
20 words
The method as described in claim 1 wherein the response includes an indication that the access request is not authorized.
Claim 6
Dependent Claim
24 words
The method as described in claim 1 wherein the response includes a list of one or more personnel who may authorize the access request.
Claim 7
Dependent Claim
23 words
The method as described in claim 1 wherein the computer network is the Internet and the trusted shared resource is a WHOIS database.
Claim 8
Dependent Claim
25 words
The method as described in claim 1 wherein the second query includes a Uniform Resource Locator (URL) identifying a host that generated the second query.
Claim 9
Dependent Claim
27 words
The method as described in claim 7 further including the step of having the identified contact associate the key with the URL prior to generating the response.
Claim 10
Dependent Claim
15 words
The method as described in claim 1 wherein the access request is a security scan.
Claim 11
Dependent Claim
15 words
The method as described in claim 1 wherein the access request is a performance scan.
Claim 12
Dependent Claim
17 words
The method as described in claim 10 wherein the key is uniquely associated with the transaction record.
Claim 13
Dependent Claim
20 words
The method as described in claim 1 further including the step of initiating the access request at the target server.
Claim 14
Independent Claim
94 words
A method of validating a request to scan a target server in a computer network including a trusted database, comprising the steps of: responsive to a request to scan the target server, initiating a first query to the trusted database to identify a contact that is trusted to respond to the scan request; transmitting an e-mail to the identified contact to determine whether the scan may be authorized, the e-mail including a URL and a key; and upon access to the URL and entry of the key, issuing a response to the scan request.
Claim 15
Independent Claim
94 words
A method of validating a request to scan a target server in a computer network including a trusted database, comprising the steps of: responsive to a request to scan the target server, initiating a first query to the trusted database to identify a contact that is trusted to respond to the scan request; transmitting an e-mail to the identified contact to determine whether the scan may be authorized, the e-mail including a URL and a key; and upon access to the URL and entry of the key, issuing a response to the scan request.
Claim 16
Dependent Claim
21 words
The method as described in claim 13 wherein the response includes an indication that the target server scan request is authorized.
Claim 17
Dependent Claim
22 words
The method as described in claim 13 wherein the response includes an indication that the target server scan request is not authorized.
Claim 18
Dependent Claim
25 words
The method as described in claim 13 wherein the response includes a list of one or more personnel who may authorize the target server scan.
Claim 19
Dependent Claim
26 words
The method as described in claim 13 further including the step of generating a transaction record including information derived from the scan request and the response.
Claim 20
Dependent Claim
23 words
The method as described in claim 13 wherein the computer network is the public Internet and the trusted database is the WHOIS database.
Claim 21
Dependent Claim
31 words
The method as described in claim 13 wherein the contact is selected from a group of contact personnel consisting essentially of a technical contact, an administrative contact, and a management contact.
Claim 22
Dependent Claim
137 words
A computer program product in a computer-readable medium for use in a server connectable in a computer network having a trusted database, comprising: means responsive to a request to scan a target server for initiating a first query to the trusted database to identify a contact that is trusted to authorize the scan; means responsive to identification of the identified contact for initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a URL and a key; and means responsive to association of the URL to the key for displaying an interface into which the identified contact may enter a response to the scan request; and means responsive to entry of information on the interface for generating a transaction record of the scan request and the response.
Claim 23
Dependent Claim
137 words
A computer program product in a computer-readable medium for use in a server connectable in a computer network having a trusted database, comprising: means responsive to a request to scan a target server for initiating a first query to the trusted database to identify a contact that is trusted to authorize the scan; means responsive to identification of the identified contact for initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a URL and a key; and means responsive to association of the URL to the key for displaying an interface into which the identified contact may enter a response to the scan request; and means responsive to entry of information on the interface for generating a transaction record of the scan request and the response.
Claim 24
Dependent Claim
24 words
The computer program product as described in claim 20 wherein the computer network is the Internet and the trusted database is a WHOIS database.
Claim 25
Dependent Claim
15 words
The computer program product as described in claim 20 wherein the URL identifies the server.
Claim 26
Dependent Claim
23 words
The computer program product as described in claim 20 wherein the interface includes one or more graphical display objects for receiving the information.
Claim 27
Dependent Claim
17 words
The computer program product as described in claim 20 wherein the interface is an interactive Web page.
Claim 28
Dependent Claim
144 words
A computer for hosting an authentication service in a computer network having a trusted database, comprising: a processor having an operating system; a browser; means responsive to a request to scan a target server for initiating a first query to the trusted database to identify a contact that is trusted to authorize the scan; means responsive to identification of the identified contact for initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a URL identifying the computer, and a key; and means responsive to association of the URL to the key for displaying, on the browser, an interface into which the identified contact may enter a response to the scan request; and means responsive to entry of information on the interface for generating a transaction record of the scan request and the response.
Claim 29
Dependent Claim
144 words
A computer for hosting an authentication service in a computer network having a trusted database, comprising: a processor having an operating system; a browser; means responsive to a request to scan a target server for initiating a first query to the trusted database to identify a contact that is trusted to authorize the scan; means responsive to identification of the identified contact for initiating a second query to the identified contact to determine whether the scan may be authorized, the second query including a URL identifying the computer, and a key; and means responsive to association of the URL to the key for displaying, on the browser, an interface into which the identified contact may enter a response to the scan request; and means responsive to entry of information on the interface for generating a transaction record of the scan request and the response.
Claim 30
Dependent Claim
28 words
The computer as described in claim 25 further comprising a scanner, and means responsive to entry of the response for activating the scanner to scan the target server.
Claim 31
Dependent Claim
15 words
The computer as described in claim 26 wherein the scanner is executed by the browser.
References Cited (Backward Citations)
JPH06110762A
Cited
US5542046A
Cited
US5611048A
Cited
US5450593A
Cited
US5414833A
Cited
US5719938A
Cited
US5696965A
Cited
US5623601A
Cited
US5550984A
Cited
WO1996034354A1
Cited
US5684951A
Cited
US5692124A
Cited
US5909493A
Cited
US5960170A
Cited
US6029196A
Cited
US5983348A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-01-30 | 2004-07-31 | 2005-01-30 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-01-30 | 2008-07-31 | 2009-01-30 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-01-30 | 2012-07-31 | 2013-01-30 | $7700.00 | Window Closed / Lapsed |