Patent · US Expired

Consolidated technique for authenticating a user to two or more applications

US7114076B2 · kind B2 · utility

10Cited by
4References
18Claims
0Family size

Assignee

Inventor

Key dates

Filing dateMay 23, 2003
Grant dateSep 26, 2006
Priority date
Expiry dateMay 11, 2025

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F21/33
  • WIPO fieldDigital communication
  • WIPO sectorElectrical engineering

Abstract

A user of a client computer is authenticated for first and second applications executing in a server. The server authenticates the user for the first application based on a userID and password of the user, and the server returns a token of the authentication to the client computer. The client computer uses the token to request a first function performed by the first application. The user subsequently requests a second function performed by the second application. In response, the client computer determines that the user has not yet been authenticated for the second application and sends a request to the server for an authentication ticket for using the second application. In response to the request for the authentication ticket, the server checks the authentication token. If valid, the server returns an authentication ticket to the client computer. The client computer requests the second function to the server. The client computer request for the second function includes the authentication ticket. The server determines that the authentication ticket supplied with the client request is valid before the second application performs the second function.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.