Single sign-on framework with trust-level mapping to authentication requirements
US6892307B1 · kind B1 · utility
Assignee
Inventors
Key dates
| Filing date | Aug 5, 1999 |
| Grant date | May 10, 2005 |
| Priority date | — |
| Expiry date | Aug 5, 2019 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2113
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A security architecture has been developed in which a single sign-on is provided for multiple information resources. Rather than specifying a single authentication scheme for all information resources, the security architecture associates trust-level requirements with information resources. Authentication schemes (e.g., those based on passwords, certificates, biometric techniques, smart cards, etc.) are associated with trust levels and a log-on service obtains credentials for an entity commensurate with the trust-level requirement(s) of an information resource (or information resources) to be accessed. Once credentials have been obtained for an entity and the entity has been authenticated to a given trust level, access is granted, without the need for further credentials and authentication, to information resources for which the authenticated trust level is sufficient.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.