US6226752B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for authenticating users
Assignee: Oracle America Inc
•
Filing: 1999-05-11
•
Granted: 2001-05-01
•
Expires: 2019-05-11
Abstract
Abstract A method and apparatus for authenticating users. Prior art mechanisms require each individual application (running on an “application server”) that the user is accessing to provide for the ability to use the various authentication mechanisms. One or more embodiments of the invention externalize the authentication mechanism from the application in the form of a login server. Only the login server needs to be configured to handle authentication mechanisms. The application server checks if a request has an active and valid session (e.g., a valid session may exist when there is active communication between a client and server that has not expired). If there is not a valid session, the application server redirects the user to the login server. The login server attempts to authenticate the user using any desired authentication mechanism. Once authenticated, the login server redirects the user back to the application server. The application server verifies the authentication directly with the login server. Once verified, the application server processes the user's request and responds accordingly. One or more embodiments of the invention may utilize cookies to aid in the authentication process. Thus, applications on the application server need not be concerned about authenticating a given user. The application server merely knows how to work with the login server to authenticate the user. Further, communications between the application server and login server are transparent (or without any interaction from) the user (although the user may see the browser communicating with each server).
Inventors
- 👤 Abhay Gupta
- 👤 Chris Ferris
- 👤 Alejandro Abdelnur
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 04:12
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/08; H04L63/0807; G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; G06F21/33; H04L67/00; H04L67/01; H04L67/02; H04L63/0815
Claims Analysis
Total Claims: 35
Claim 1
Independent Claim
88 words
A method of authenticating users comprising: a client requestor transmitting a request to a first server; said first server redirecting said client requestor to a second server if said client requestor does not have a valid session, wherein said valid session comprises an allowable period of time during which a user may access one or more servers in a network of computers; said second server authenticating said client requestor; said second server creating a new session; and said second server redirecting said client requestor to said first server.
Claim 2
Independent Claim
88 words
A method of authenticating users comprising: a client requestor transmitting a request to a first server; said first server redirecting said client requestor to a second server if said client requestor does not have a valid session, wherein said valid session comprises an allowable period of time during which a user may access one or more servers in a network of computers; said second server authenticating said client requestor; said second server creating a new session; and said second server redirecting said client requestor to said first server.
Claim 3
Dependent Claim
16 words
The method of claim 1 further comprising creating said new session if said authenticating is successful.
Claim 4
Dependent Claim
24 words
The method of claim 2 wherein said first server redirects said client requestor to said second server when said valid session does not exist.
Claim 5
Dependent Claim
34 words
The method of claim 2 further comprising: said client requestor transmitting a request to logout and a cookie to said first server; and said first server invalidating said session if said cookie is valid.
Claim 6
Dependent Claim
87 words
The method of claim 1 further comprising: said first server receiving said request from said client requestor; said first server attaching a temporary identifier to said request; said first server redirecting said client requestor to said second server using said request information, wherein request information comprises said temporary identifier; said second server storing said temporary identifier in a location accessible to said first server, and indicating a successful authentication; and said first server accessing said location to obtain said stored temporary identifier for verification of said session.
Claim 7
Dependent Claim
31 words
The method of claim 1 wherein said second server authenticating said client requestor comprises: obtaining a cookie from said client requestor; and indicating a successful authentication if said cookie is valid.
Claim 8
Dependent Claim
19 words
The method of claim 1 wherein said second server authenticates said client requestor using a username and password mechanism.
Claim 9
Dependent Claim
17 words
The method of claim 1 wherein said second server authenticates said client requestor using a challenge-response mechanism.
Claim 10
Dependent Claim
17 words
The method of claim 1 wherein said second server authenticates said client requestor using a smartcard mechanism.
Claim 11
Dependent Claim
32 words
The method of claim 1 wherein said step of said second server authenticating said client requestor comprises: obtaining authentication information from said client requestor; and determining if said authentication information is valid.
Claim 12
Dependent Claim
16 words
The method of claim 1 further comprising said first server transmitting a response to said requestor.
Claim 13
Independent Claim
45 words
A system comprising a client requestor; a first server configured to process a request from said requester and redirect said client requester to a second server; and said second server configured to authenticate said client requester and redirect said client requestor to said first server.
Claim 14
Independent Claim
45 words
A system comprising a client requestor; a first server configured to process a request from said requester and redirect said client requester to a second server; and said second server configured to authenticate said client requester and redirect said client requestor to said first server.
Claim 15
Dependent Claim
24 words
The system of claim 12 further comprising a session service configured to create a session if said authentication by said second server is successful.
Claim 16
Dependent Claim
24 words
The system of claim 13 wherein said first server redirects said client requestor to a second session when a valid session does not exist.
Claim 17
Dependent Claim
38 words
The system of claim 13 further comprising: said client requestor configured to transmit a request to logout and a cookie to said first server; and said session service configured to invalidate said session if said cookie is valid.
Claim 18
Dependent Claim
49 words
The system of claim 12 further comprising: said first server configured to transmit a temporary identifier with said redirection to a second server; said second server configured to store said temporary identifier; and said first server further configured to verify authentication with said second server utilizing said temporary identifier.
Claim 19
Dependent Claim
29 words
The system of claim 12 wherein said second server is configured to: obtain a cookie from said client requestor; and indicate a successful authentication if said cookie is valid.
Claim 20
Dependent Claim
18 words
The system of claim 12 wherein said second server authenticates said requester using a username and password mechanism.
Claim 21
Dependent Claim
15 words
The system of claim 12 wherein said second server authenticates said client requestor challenge-response mechanism.
Claim 22
Dependent Claim
16 words
The system of claim 12 wherein said second server authenticates said requestor using a smartcard mechanism.
Claim 23
Dependent Claim
27 words
The system of claim 12 wherein said second server is configured to: obtain authentication information from said client requester; and determine if said authentication information is valid.
Claim 24
Dependent Claim
99 words
A computer program product comprising: a computer usable medium having computer readable program code embodied therein configured to authenticate client requestors, said computer program product comprising: computer readable program code configured to cause a computer to request information from a first server; computer readable program code configured to cause said first server to redirect said client requestor to a second server; computer readable program code configured to cause said second server to authenticate a client requester of said information; and computer readable program code configured to cause said second server to redirect said client requestor to said first server.
Claim 25
Dependent Claim
99 words
A computer program product comprising: a computer usable medium having computer readable program code embodied therein configured to authenticate client requestors, said computer program product comprising: computer readable program code configured to cause a computer to request information from a first server; computer readable program code configured to cause said first server to redirect said client requestor to a second server; computer readable program code configured to cause said second server to authenticate a client requester of said information; and computer readable program code configured to cause said second server to redirect said client requestor to said first server.
Claim 26
Dependent Claim
31 words
The computer program product of claim 22 further comprising computer readable program code configured to cause a computer to create a session if said authentication by said second server is successful.
Claim 27
Dependent Claim
55 words
The computer program product of claim 23 wherein said computer readable program, code configured to cause said first server to redirect said client requester to a second server comprises computer readable program code configured to cause said first server to redirect said client requestor to a second server when a valid session does not exist.
Claim 28
Dependent Claim
50 words
The computer program product of claim 23 further comprising: computer readable program code configured to cause a computer to transmit a request to logout and a cookie to said first server; and computer readable program code configured to cause a computer to invalidate said session if said cookie is valid.
Claim 29
Dependent Claim
65 words
The computer program product of claim 22 further comprising: computer readable program code configured to cause said first server to transmit a temporary identifier to said second server; computer readable program code configured to cause said second server to store said temporary identifier; and computer readable program code configured to cause said first server to verify authentication with said second server utilizing said temporary identifier.
Claim 30
Dependent Claim
63 words
The computer program product of claim 22 wherein said computer readable program code configured to cause said second server to authenticate said client requester comprises: computer readable program code configured to cause said second server to obtain a cookie from said client requestor; and computer readable program code configured to cause a computer to indicate a successful authentication if said cookie is valid.
Claim 31
Dependent Claim
42 words
The computer program product of claim 22 wherein said computer readable program code configured to cause said second server to authenticate said client requestor comprises computer readable program, code configured to utilize a username and password mechanism to authenticate said client requestor.
Claim 32
Dependent Claim
40 words
The computer pogrom product of claim 22 wherein said computer readable program, code configured to cause said second server to authenticate said client requestor comprises computer readable program code configured to utilize a challenge-response mechanism to authenticate said client requestor.
Claim 33
Dependent Claim
39 words
The computer program product of claim 22 wherein said computer readable program code configured to cause said second server to authenticate said client requester comprises computer readable program code configured to utilize a smartcard mechanism to authenticate said requester.
Claim 34
Dependent Claim
60 words
The computer program product of claim 22 wherein said computer readable program code configured to cause said second server to authenticate said client requester comprises: computer readable program code configured to cause a computer to obtain authentication information from said client requestor; and computer readable program code configured to cause a computer to determine if said authentication information is valid.
Claim 35
Dependent Claim
30 words
The computer program product of claim 22 further comprising computer readable program code configured to cause said first server to transmit a response to a client requestor of said information.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2004-04-30 | 2004-10-30 | 2005-05-01 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2008-04-30 | 2008-10-30 | 2009-05-01 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2012-04-30 | 2012-10-30 | 2013-05-01 | $7700.00 | Window Closed / Lapsed |