US 11,379,596 B2Granted

Method and system for ensuring authentication compatibility

AssigneeJPMorgan Chase Bank, N.A.

InventorsRobert Macandrew, Miklos Kalman, Joel Klein

Life of this patent

Estimating the term…

Loading patent…

Abstract

A method and a system for providing a bridging solution in order to ensure that a current authentication protocol remains effective when a new authentication protocol is to be introduced but has not yet been implemented at both ends of an interaction between a requesting application and a database are provided. The method includes determining whether a first authentication protocol that is currently implemented by the application is the same protocol as a second authentication protocol that is currently implemented by the database. When the two protocols are different, the first protocol is used to validate a request for data submitted by the application in conjunction with authentication information; the authentication information is converted into a format that is usable by the second protocol; and the converted information is used with the second protocol to generate information that indicates that the request has been authenticated.

Claims14

Dependent claims

A method for authenticating a request for access to a database, the method being implemented by at least one processor, the method comprising:

receiving, from an application by the at least one processor, a first request for data that is accessible via a database, the first request including first authentication information for validating that the application has permission to access the requested data;
determining, by the at least one processor, a first authentication protocol that is currently implemented by the application, a second authentication protocol that is currently implemented by the database, and whether the first authentication protocol is a same protocol as the second authentication protocol;
using, by the at least one processor, the first authentication information to authenticate the first request for data;
and
when the first request has been authenticated, transmitting the authenticated first request and information that indicates that the first request has been authenticated to a first server configured to retrieve data from the database,
wherein when the first authentication protocol is determined as being the same protocol as the second authentication protocol, the using the first authentication information to authenticate the first request for data comprises:
inputting the first authentication information into the first authentication protocol;
determining, based on an output of the first authentication protocol, whether the application has a valid permission to access the requested data;
and
when the application is determined as having the valid permission, using the output of the first authentication protocol as the information that indicates that the first request has been authenticated.

7 more elements

A computing apparatus for authenticating a request for access to a database, the computing apparatus comprising:

a processor;
a memory;
and
a communication interface coupled to each of the processor and the memory,
wherein the processor is configured to:
receive, from an application via the communication interface, a first request for data that is accessible via a database, the first request including first authentication information for validating that the application has permission to access the requested data;
determine a first authentication protocol that is currently implemented by the application, a second authentication protocol that is currently implemented by the database, and whether the first authentication protocol is a same protocol as the second authentication protocol;
use the first authentication information to authenticate the first request for data;
and
when the first request has been authenticated, transmit, via the communication interface to a first server configured to retrieve data from the database, the authenticated first request and information that indicates that the first request has been authenticated,
wherein when the first authentication protocol is determined as being the same protocol as the second authentication protocol, the processor is further configured to:
input the first authentication information into the first authentication protocol;
determine, based on an output of the first authentication protocol, whether the application has a valid permission to access the requested data;
and
when the application is determined as having the valid permission, use the output of the first authentication protocol as the information that indicates that the first request has been authenticated.

12 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/929,557Filed 15 Jul 2020
Published: US 2022/0019679 A120 Jan 2022
Granted: 5 Jul 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/62
Protecting data: protecting access to data via a platform, e.g. using keys or access control rules
G06F 21/6236
To a system of files or objects, e.g. local or distributed file system or database: between heterogeneous systems
G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
G06F 21/6227
To a system of files or objects, e.g. local or distributed file system or database: where protection concerns the structure of data, e.g. records,…