US6615264B1
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for remotely administered authentication and access control
Assignee: Oracle America Inc
•
Filing: 1999-04-09
•
Granted: 2003-09-02
•
Expires: 2019-04-09
Abstract
Abstract Authentication and session management can be used with a system architecture that partitions functionality between a human interface device (HID) and a computational service provider such as a server. An authentication manager executing on a server interacts with the HID to validate the user when the user connects to the system via the HID. The authentication manager interacts with authentication modules. Each authentication module may be configured to authenticate a user based on a different authentication mechanism (e.g., using a smart card, using a login and password, using biometric data, etc.) and may be utilized in connection with one or more sessions. The authentication manager and authentication modules are also responsible for controlling access to services/sessions and may remove/revoke or augment such access. A session manager executing on a server manages services running on computers providing computational services (e.g., programs) on behalf of the user. The session manager notifies each service in a session that the user is attached to the system using a given desktop machine. A service can direct display output to the HID while the user is attached to the system. When a user detaches from the system, each of the service's executing for the user is notified via the authentication manager and the session manager. Upon notification that the user is detached from the system, a service continues to execute while stopping its display to the desktop machine.
Inventors
- 👤 Benjamin H. Stoltz
- 👤 James G. Hanko
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-09 20:33
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/30; G06F21/31; H; H04; H04L; H04L63/00; H04L63/08; H04L67/00; H04L67/01; H04L67/10; H04L67/1001; H04L63/083; H04L63/0846; H04L63/0853; H04L63/0861
Claims Analysis
Total Claims: 24
Claim 1
Independent Claim
82 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user, wherein said authentication request comprises at least one of a token and a pseudo token; a plurality of authentication modules for authenticating said user, wherein said plurality authentication modules are distinct from said authentication manager and wherein said plurality authentication modules are not input devices; and a session manager for obtaining notification of authentication from said plurality of authentication modules.
Claim 2
Independent Claim
82 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user, wherein said authentication request comprises at least one of a token and a pseudo token; a plurality of authentication modules for authenticating said user, wherein said plurality authentication modules are distinct from said authentication manager and wherein said plurality authentication modules are not input devices; and a session manager for obtaining notification of authentication from said plurality of authentication modules.
Claim 3
Dependent Claim
31 words
The system of claim 1 , wherein said plurality of authentication modules comprise an authentication module configured to only accept a connection with said user if said user has said token.
Claim 4
Dependent Claim
32 words
The system of claim 1 , wherein said plurality of authentication modules comprise an authentication module configured to only accept a connection with said user if said user has said pseudo token.
Claim 5
Dependent Claim
33 words
The system of claim 1 , wherein said plurality of authentication modules comprise a first authentication module for accepting users with tokens and a second authentication module for accepting users with pseudo tokens.
Claim 6
Dependent Claim
21 words
The system of claim 1 , wherein said plurality of authentication modules comprise a third authentication module for accepting all users.
Claim 7
Dependent Claim
24 words
The system of claim 1 , wherein said pseudo token comprises at least one of an Ethernet address and a media access controller address.
Claim 8
Dependent Claim
26 words
The system of claim 1 , wherein said authentication request comprises an ordered ASCII string and wherein said ordered ASCII string comprises a token type indication.
Claim 9
Independent Claim
105 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user; first and second authentication modules for authenticating said user, wherein said first and second authentication modules are distinct from said authentication manager, wherein said first and second authentication modules are not input devices, wherein said first authentication module is configured to accept said authentication request if said authentication request is registered with the system, and wherein said second authentication module is configured to accept all authentication requests; and a session manager for obtaining notification of authentication from said first and second authentication modules.
Claim 10
Independent Claim
105 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user; first and second authentication modules for authenticating said user, wherein said first and second authentication modules are distinct from said authentication manager, wherein said first and second authentication modules are not input devices, wherein said first authentication module is configured to accept said authentication request if said authentication request is registered with the system, and wherein said second authentication module is configured to accept all authentication requests; and a session manager for obtaining notification of authentication from said first and second authentication modules.
Claim 11
Dependent Claim
23 words
The system of claim 8 , wherein said authentication manager is configured to present said authentication request only to said first authentication module.
Claim 12
Dependent Claim
23 words
The system of claim 9 , wherein said first authentication module is configured to present said authentication request to said second authentication module.
Claim 13
Dependent Claim
38 words
The system of claim 10 , wherein said first authentication module is configured to present said authentication request to said second authentication module if said first authentication module does not want to accept responsibility for said authentication request.
Claim 14
Dependent Claim
28 words
The system of claim 8 , wherein said authentication request is presented to said second authentication module only if said authentication request is not registered with the system.
Claim 15
Dependent Claim
19 words
The system of claim 8 , wherein said second authentication module can register said authentication request with the system.
Claim 16
Independent Claim
100 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user; an authentication module for authenticating said user, wherein said authentication module is distinct from said authentication manager, wherein said authentication module is not an input device, and wherein said authentication manager is configured to present said authentication request to said authentication module; and a session manager for obtaining notification of authentication from said authentication module, wherein said authentication manager is configured to provide said authentication module with a start session service for ensuring that a session is started.
Claim 17
Independent Claim
100 words
A system for controlling access by a user to sessions, comprising: an authentication manager for obtaining an authentication request from said user; an authentication module for authenticating said user, wherein said authentication module is distinct from said authentication manager, wherein said authentication module is not an input device, and wherein said authentication manager is configured to present said authentication request to said authentication module; and a session manager for obtaining notification of authentication from said authentication module, wherein said authentication manager is configured to provide said authentication module with a start session service for ensuring that a session is started.
Claim 18
Dependent Claim
71 words
The system of claim 14 , wherein said authentication module comprises a plurality of cascaded authentication modules, wherein each of said plurality of cascaded authentication module is configured to accept responsibility for a particular type of authentication request, and wherein said authentication request is presented from one cascaded authentication module to another until said authentication request is presented to a cascaded authentication module that can accept responsibility for said authentication request.
Claim 19
Dependent Claim
22 words
The system of claim 15 , wherein at least one of said cascaded authentication modules is configured to revoke said authentication request.
Claim 20
Dependent Claim
32 words
The system of claim 15 , wherein at least one of said cascaded authentication modules is configured to request a first password from said user and a second password from said user.
Claim 21
Dependent Claim
27 words
The system of claim 15 , wherein at least one of said cascaded modules is configured to accept responsibility for an authentication request based on biometric data.
Claim 22
Dependent Claim
29 words
The system of claim 15 , wherein at least one of said cascaded authentication modules is configured to accept responsibility for an authentication request based on a smart card.
Claim 23
Dependent Claim
28 words
The system of claim 15 , wherein at least one of said cascaded authentication modules is configured to authenticate said authentication request for a specified period of time.
Claim 24
Dependent Claim
25 words
The system of claim 14 , wherein said authentication manager, said authentication module, and said session manager are configured using a computer readable program code.
References Cited (Backward Citations)
US5442749A
Cited
US5761309A
Cited
US6317830B1
Cited
US6006328A
Cited
US5774551A
Cited
US5841970A
Cited
US5845070A
Cited
US5944824A
Cited
US6023684A
Cited
US6226744B1
Cited
US6385596B1
Cited
US6233565B1
Cited
US6073242A
Cited
US6226751B1
Cited
US6223289B1
Cited
US6275944B1
Cited
US6219790B1
Cited
US6173400B1
Cited
US6289462B1
Cited
US6470397B1
Cited
US6226752B1
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2006-09-01 | 2007-03-03 | 2007-09-02 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2010-09-01 | 2011-03-03 | 2011-09-02 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2014-09-01 | 2015-03-03 | 2015-09-02 | $7700.00 | Window Closed / Lapsed |