Systems and methods for encoding additional authentication data into an active directory security identifier
AssigneeCitrix Systems, Inc.
InventorAndrew Ogle
Life of this patent
Estimating the term…
Abstract
Systems and methods for operating a computing system. The methods comprise: obtaining, by a first computing device, an original Security Identifier (“SID”); transforming, by the first computing device, the original SID into a composite SID by modifying the original SID to include at least (a) an SID format value indicating a structural format of an SID and (b) a pointer specifying a memory location at which non-SID authentication information is stored or a customer number indicating an entity to which a user is associated; and using the composite SID by the first computing device during SID based operation.
Claims20
A method for operating a computing system, comprising:
- receiving, by a computing device, a Security Identifier (“SID”), the SID comprising an array of bytes that represent a plurality of values, at least one of the plurality of values comprising an identifier authority value represented by a subset of the array of bytes;
- modifying, by the computing device, the received SID to generate a composite SID by assignment of a portion of the subset of the array of bytes that represent the identifier authority value to represent an SID format value, without modification of the identifier authority value, to form a composite field within the array of bytes, wherein the composite SID is configured to uniquely identify an external device and to permit the external device to access at least one resource hosted on the computing device;
- converting, by the computing device, the composite SID back into the received SID by extracting the SID format value from the composite field in response to a determination that the computing device is to communicate with the external device;
- and
- providing, by the computing device, data to the external device that includes the converted SID to facilitate communication between the computing device and the external device.
A system, comprising:
- a processor;
- and
- a non-transitory computer-readable storage medium comprising programming instructions that are configured to cause the processor to implement a method for inventory management, wherein the programming instructions comprise instructions to:
- receive a Security Identifier (“SID”), the SID comprising an array of bytes that represent a plurality of values, at least one of the plurality of values comprising an identifier authority value represented by a subset of the array of bytes;
- modify the received SID to generate a composite SID by assignment of a portion of the subset of the array of bytes that represent the identifier authority value to represent an SID format value, without modification of the identifier authority value, to form a composite field within the array of bytes, wherein the composite SID is configured to uniquely identify an external device and to permit the external device to access at least one resource hosted on the computing device;
- convert the composite SID back into the received SID by extracting the SID format value from the composite field in response to a determination that the computing device is to communicate with the external device;
- and
- provide data to the external device that includes the converted SID to facilitate communication with the external device.
Dependencies are inferred from the claim text.