公开(公告)号：US20160112403A1

公开(公告)日：2016-04-21

申请号：US14858943

申请日：2015-09-18

Applicant: Barracuda Networks, Inc.

Inventor： Fleming SHI ,  Luo WANG

IPC: H04L29/06

CPC classification number: H04L9/3263 ,  H04L9/0643 ,  H04L9/14 ,  H04L9/302 ,  H04L63/0218 ,  H04L63/0227 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/105 ,  H04L63/107 ,  H04L67/1002 ,  H04L67/1036

Abstract: A new approach is proposed that contemplates systems and methods to support bulk authentication of an appliance associated with a user to all cloud-based services the appliance intends to access in one transaction instead of authenticating the appliance against each of the services individually. First, the appliance generates and transmits to an authentication service cluster an authentication request that includes its identification and authentication credentials in order to access to a plurality of services. Upon receiving the authentication request, the authentication service cluster authenticates the appliance for all of the services to be accessed based on the information in the authentication request. Once the appliance is authenticated, the authentication service cluster then retrieves entitlement information of the services to be accessed by the appliance, and identifies the service clusters/nodes that the appliance will connect to for the services with the fastest response time.

Abstract translation: 提出了一种新的方法，其考虑系统和方法来支持与用户相关联的设备的批量认证到设备打算在一个事务中访问的所有基于云的服务，而不是单独地针对每个服务验证设备。 首先，设备生成并向认证服务集群发送包括其身份验证凭证以便访问多个服务的认证请求。 认证服务集群在接收到认证请求后，根据认证请求中的信息对所有要访问的服务进行认证。 一旦设备被认证，认证服务集群然后检索设备要访问的服务的授权信息，并以最快的响应时间标识设备将为服务连接的服务集群/节点。

公开(公告)号：US20170237572A1

公开(公告)日：2017-08-17

申请号：US15586213

申请日：2017-05-03

Applicant: BARRACUDA NETWORKS, INC.

Inventor： Fleming SHI ,  Luo WANG

IPC: H04L9/32 ,  H04L9/30 ,  H04L9/14 ,  H04L29/06 ,  H04L9/06

CPC classification number: H04L9/3263 ,  H04L9/0643 ,  H04L9/14 ,  H04L9/302 ,  H04L63/0218 ,  H04L63/0227 ,  H04L63/0815 ,  H04L63/0823 ,  H04L63/105 ,  H04L63/107 ,  H04L67/1002 ,  H04L67/1036

Abstract: A new approach is proposed that contemplates systems and methods to support bulk authentication of a device associated with a user to all cloud-based services the device intends to access in one transaction instead of authenticating the device against each of the services individually. First, the device generates and transmits to one or more authentication service clusters an authentication request that includes its identification and authentication credentials in order to access to a plurality of services. Upon receiving the authentication request, the authentication service cluster(s) authenticate the device for all of the services to be accessed based on the information in the authentication request. Once the device is authenticated, the authentication service cluster(s) then retrieve entitlement information of the services to be accessed by the device, and identify the service clusters/nodes that the device will connect to for the services with the fastest response time.