Accessing hosts in a computer network
AssigneeSSH Communications Security OYJ
InventorMarkku Rossi
Life of this patent
Estimating the term…
Abstract
A security function is provided by an intermediate device located between hosts and devices requesting for access to the hosts in a computerized network. The intermediate device receives a request for access to a host, and obtains at least one authenticator for use in the requested access to the host. The intermediate device then monitors for communications that use the at least one authenticator.
Claims26
An intermediate device for providing a security function in a computerized network between hosts and devices capable of accessing the hosts, the intermediate device comprising:
- an interface apparatus configured for communications with hosts and devices requesting access to the hosts such that the intermediate device provides an intermediate node between the hosts and the devices, and
- a control apparatus connected to the interface apparatus and comprising at least one processor, and memory storing instructions that, when executed, cause the control apparatus to:
- process a request, received by the intermediate device and from a device, for access to a host,
- request and receive, by the intermediate device and from a security device, at least one ephemeral authenticator based on a user role mapped from the request received by the intermediate device and from the device for use in the requested access to the host, and
- monitor and process communications between the device and the host through the intermediate device that use the at least one ephemeral authenticator to identify a user of the at least one ephemeral authenticator for the communications between the device and the host,
- wherein the monitoring is based on at least one condition on use of the at least one ephemeral authenticator.
An intermediate device for providing a security function in a computerized network between hosts and devices capable of accessing the hosts, the intermediate device comprising:
- an interface apparatus configured for communications with hosts and devices requesting access to the hosts such that the intermediate device provides an intermediate node between the hosts and the devices, and
- a control apparatus connected to the interface apparatus and comprising at least one processor, and memory storing instructions that, when executed, cause the control apparatus to:
- receive, from a device, and authenticate a request for access to a host, wherein the request for access contains at least one second authenticator for use in authentication of the request for access;
- after the request for access has been authenticated based on the at least one second authenticator, request and receive, from a security device, at least one ephemeral authenticator based on a user role mapped from the request received by the intermediate device and from the device for use in the requested access to the host;
- and
- process communications between the device and the host that use the at least one ephemeral authenticator from the security device to identify a user of the at least one ephemeral authenticator for the communications between the device and the host,
- wherein the control apparatus is configured to monitor, based on at least one condition for use of the at least one ephemeral authenticator, the communications between the device and the host.
A method for providing a security function by an intermediate device located between hosts and devices requesting for access to the hosts in a computerized network, the method comprising:
- receiving, from a device and by the intermediate device, a request for access to a host,
- requesting and receiving, by the intermediate device and based on a user role mapped from the request received by the intermediate device and from the device, at least one ephemeral authenticator for use in the requested access to the host, and
- monitoring and processing, by the intermediate device, communications between the device and the host through the intermediate device that use the at least one ephemeral authenticator to identify a user of the at least one ephemeral authenticator for the communications between the device and the host,
- wherein the monitoring is based on at least one condition on use of the at least one ephemeral authenticator.
A non-transitory computer readable media comprising program code for causing a processor to perform instructions for a security method implemented at an intermediate device located between hosts and devices requesting for access to the hosts in a computerized network, the security method performed by the intermediate device comprising:
- receiving, by the intermediate device and from a device, a request for access to a host,
- requesting and receiving, by the intermediate device and based on a user role mapped from the request received by the intermediate device and from the device, at least one ephemeral authenticator for use in the requested access to the host, and
- monitoring and processing communications between the device and the host through the intermediate device that use the at least one ephemeral authenticator to identify a user of the at least one ephemeral authenticator for the communications between the device and the host,
- wherein the monitoring is based on at least one condition on use of the at least one ephemeral authenticator.
Dependencies are inferred from the claim text.