System, method and program product for consolidated authentication
    2.
    发明授权
    System, method and program product for consolidated authentication 有权
    用于统一认证的系统,方法和程序产品

    公开(公告)号:US08880872B2

    公开(公告)日:2014-11-04

    申请号:US13480038

    申请日:2012-05-24

    IPC分类号: G06F21/00 G06F21/41 G06F21/33

    摘要: A first computer sends a request to the second computer to access the application. The second computer determines that the user has not yet been authenticated to the application. The second computer redirects the request to a third computer. The third computer determines that the user has been authenticated to the third computer. The third computer authenticates the user to the application. The second computer returns a session key to the third computer for a session between the application and the user. The session has a scope of the second computer or the application but not a scope of a domain. The third computer generates another session key with a scope of the domain and sends the domain-scope session key to the first computer.

    摘要翻译: 第一台计算机向第二台计算机发送访问应用程序的请求。 第二台计算机确定用户尚未对应用程序进行身份验证。 第二台计算机将请求重定向到第三台计算机。 第三台计算机确定用户已被认证到第三台计算机。 第三台计算机向应用程序验证用户。 第二台计算机将会话密钥返回给第三台计算机,用于应用程序和用户之间的会话。 会话具有第二台计算机或应用程序的范围,但不包括域的范围。 第三台计算机生成另一个具有域范围的会话密钥,并将域范围会话密钥发送到第一台计算机。

    System, method and program product for consolidated authentication
    3.
    发明授权
    System, method and program product for consolidated authentication 有权
    用于统一认证的系统,方法和程序产品

    公开(公告)号:US08219802B2

    公开(公告)日:2012-07-10

    申请号:US12116616

    申请日:2008-05-07

    IPC分类号: G06F21/00

    摘要: A first computer sends a request to the second computer to access the application. In response, the second computer determines that the user has not yet been authenticated to the application. In response, the second computer redirects the request to a third computer. In response, the third computer determines that the user has been authenticated to the third computer. In response, the third computer authenticates the user to the application. In response, the second computer returns a session key to the third computer for a session between the application and the user. The session has a scope of the second computer or the application but not a scope of a domain. In response to the authentication of the user to the second application and receipt by the third computer of the session key from the second computer for a session between the user and the second computer or the application, the third computer generates another session key with a scope of the domain and sends the domain-scope session key to the first computer. The first computer sends another request to the application with the domain-scope session key.

    摘要翻译: 第一台计算机向第二台计算机发送访问应用程序的请求。 作为响应,第二计算机确定用户尚未被认证到该应用。 作为响应,第二计算机将请求重定向到第三计算机。 作为响应,第三计算机确定用户已被认证到第三计算机。 作为响应,第三台计算机向应用程序认证用户。 作为响应,第二计算机向第三计算机返回会话密钥以用于应用和用户之间的会话。 会话具有第二台计算机或应用程序的范围,但不包括域的范围。 响应于用户对第二应用的认证和第三计算机从第二计算机接收用于用户和第二计算机或应用之间的会话的会话密钥,第三计算机生成具有范围的另一会话密钥 并将域范围会话密钥发送到第一台计算机。 第一台计算机使用域范围会话密钥向应用发送另一个请求。

    SYSTEM, METHOD AND PROGRAM PRODUCT FOR CONSOLIDATED AUTHENTICATION
    4.
    发明申请
    SYSTEM, METHOD AND PROGRAM PRODUCT FOR CONSOLIDATED AUTHENTICATION 审中-公开
    系统,方法和程序产品合并认证

    公开(公告)号:US20120291141A1

    公开(公告)日:2012-11-15

    申请号:US13480038

    申请日:2012-05-24

    IPC分类号: G06F21/24

    摘要: A first computer sends a request to the second computer to access the application. The second computer determines that the user has not yet been authenticated to the application. The second computer redirects the request to a third computer. The third computer determines that the user has been authenticated to the third computer. The third computer authenticates the user to the application. The second computer returns a session key to the third computer for a session between the application and the user. The session has a scope of the second computer or the application but not a scope of a domain. The third computer generates another session key with a scope of the domain and sends the domain-scope session key to the first computer.

    摘要翻译: 第一台计算机向第二台计算机发送访问应用程序的请求。 第二台计算机确定用户尚未对应用程序进行身份验证。 第二台计算机将请求重定向到第三台计算机。 第三台计算机确定用户已被认证到第三台计算机。 第三台计算机向应用程序验证用户。 第二台计算机将会话密钥返回给第三台计算机,用于应用程序和用户之间的会话。 会话具有第二台计算机或应用程序的范围,但不包括域的范围。 第三台计算机生成另一个具有域范围的会话密钥,并将域范围会话密钥发送到第一台计算机。

    SYSTEM, METHOD AND PROGRAM PRODUCT FOR CONSOLIDATED AUTHENTICATION
    5.
    发明申请
    SYSTEM, METHOD AND PROGRAM PRODUCT FOR CONSOLIDATED AUTHENTICATION 有权
    系统,方法和程序产品合并认证

    公开(公告)号:US20090282239A1

    公开(公告)日:2009-11-12

    申请号:US12116616

    申请日:2008-05-07

    申请人: Yaser K. Doleh

    发明人: Yaser K. Doleh

    IPC分类号: H04L9/32

    摘要: A first computer sends a request to the second computer to access the application. In response, the second computer determines that the user has not yet been authenticated to the application. In response, the second computer redirects the request to a third computer. In response, the third computer determines that the user has been authenticated to the third computer. In response, the third computer authenticates the user to the application. In response, the second computer returns a session key to the third computer for a session between the application and the user. The session has a scope of the second computer or the application but not a scope of a domain. In response to the authentication of the user to the second application and receipt by the third computer of the session key from the second computer for a session between the user and the second computer or the application, the third computer generates another session key with a scope of the domain and sends the domain-scope session key to the first computer. The first computer sends another request to the application with the domain-scope session key.

    摘要翻译: 第一台计算机向第二台计算机发送访问应用程序的请求。 作为响应,第二计算机确定用户尚未被认证到该应用。 作为响应,第二计算机将请求重定向到第三计算机。 作为响应,第三计算机确定用户已被认证到第三计算机。 作为响应,第三台计算机向应用程序认证用户。 作为响应,第二计算机向第三计算机返回会话密钥以用于应用和用户之间的会话。 会话具有第二台计算机或应用程序的范围,但不包括域的范围。 响应于用户对第二应用的认证和第三计算机从第二计算机接收用于用户和第二计算机或应用之间的会话的会话密钥,第三计算机生成具有范围的另一会话密钥 并将域范围会话密钥发送到第一台计算机。 第一台计算机使用域范围会话密钥向应用发送另一个请求。