Systems and methods for facilitating distributed authentication
US8112789B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Oct 6, 2006 |
| Grant date | Feb 7, 2012 |
| Priority date | — |
| Expiry date | Sep 21, 2029 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/0407
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A method for facilitating distributed authentication includes the step of requesting, by a user of a client machine residing in a first domain, access to a resource residing in a second domain. The client machine authenticates the user to an intermediate machine. The intermediate machine impersonates the client machine. The intermediate machine impersonating the client machine requests access to the second domain from a domain controller residing in the second domain. The domain controller authorizes the requested access, responsive to a determination that the impersonated client machine is trusted for delegation. The domain controller transmits to an application server residing in the second domain, authentication data associated with the impersonated client machine. The application server transmits, to the intermediate machine, a launch ticket uniquely identifying a logon token. The client machine provides, to the application server, the launch ticket to access the resource residing in the second domain.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.