Authentication of users in a computer network
AssigneeSSH Communications Security OYJ
InventorMarkku Rossi
Life of this patent
Estimating the term…
Abstract
Apparatuses and methods for authenticating a user to a host by an agent are disclosed. In the method the agent receives a connection request to the host from the user. In response to the received connection request, the agent determines an ephemeral authenticator, and acquires using the ephemeral authenticator a second authenticator. The second authenticator is based at least in part on use of the ephemeral authenticator. The agent then authenticates the user to the host using the second authenticator.
Claims22
A network device comprising at least one processor, and memory storing instructions that, when executed, are configured to provide an authentication agent entity to:
- receive, via a network, by the authentication agent entity provided in the network device, and from a user device, a connection request to a host,
- in response to receiving the connection request, determine, by the authentication agent entity, at least one user role for the user device,
- acquire, by the authentication agent entity and from an authorization device, an ephemeral authenticator based on the determined at least one user role, and
- perform, by the authentication agent entity, based on the connection request, and with the host, authentication using the acquired ephemeral authenticator.
A method for authenticating a user device to a host by an authentication agent entity provided in a network device, comprising:
- receiving, via a network, by the authentication agent entity provided in the network device, and from the user device, a connection request to the host,
- in response to the received connection request, determining, by the authentication agent entity, at least one user role for the user device,
- acquiring, by the authentication agent entity and from an authorization device, an ephemeral authenticator based on the determined at least one user role for the user device, and
- authenticating, by the authentication agent entity and based on the connection request, the user device to the host using the acquired ephemeral authenticator,
- wherein the authentication agent entity is distinct from the authorization device.
A non-transitory computer readable media comprising program code for causing a processor to perform instructions for a security method in an authentication agent between hosts and devices requesting for access to the hosts in a computerized network, the security method performed comprising:
- receiving, via the computerized network, by the authentication agent provided in a network device, and from a device of a user, a connection request to a host,
- in response to the received connection request and by the authentication agent, determining at least one user role for the user,
- acquiring, by the authentication agent and from an authorization device, an ephemeral authenticator based on the determined at least one user role, and
- authenticating, by the authentication agent and based on the connection request, the device of the user to the host using the acquired ephemeral authenticator.
Dependencies are inferred from the claim text.