US 11,539,684 B2Granted

Dynamic authentication scheme selection in computing systems

AssigneeMicrosoft Technology Licensing, LLC

InventorParanthaman Saravanan

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques of dynamic authentication scheme selection in distributed computing systems are disclosed herein. One example technique includes analyzing a received authentication request for an indicator of an authentication scheme that is supported by a computing service submitting the authentication request. The example technique can also include determining whether the authentication scheme associated with the indicator is also supported by the authentication service and in response to determining that the authentication scheme associated with the indicator is also supported by the authentication service, initiating an authentication process with the computing service according to the authentication scheme that is supported by both the computing service and the authentication service. As such, the authentication scheme can be dynamically selected at the authentication service for the received authentication request.

Claims20

Dependent claims

A method of dynamic authentication scheme selection in a distributed computing system executing instructions to provide an authentication service, the method comprising:

receiving, at the authentication service, data representing an authentication request from a computing service;
analyzing, at the authentication service, the received data representing the authentication request for an indicator of an authentication scheme that is supported by the computing service submitting the authentication request;
determining, at the authentication service, whether the authentication scheme of the indicator matches one of one more authentication schemes supported by the authentication service;
in response to determining that the authentication scheme that is supported by the computing service matches an authentication scheme supported by the authentication service,
initiating, with the authentication service, an authentication process with the computing service according to the authentication scheme that is supported by both the computing service and the authentication service;
authenticating the authentication request, from the computing service, using the initiated authentication process;
and
upon successful authentication of the authentication request, transmitting, from the authentication service, a security token to the computing service useful for authenticating the computing service to other computing services in the distributed computing system, thereby dynamically selecting the authentication scheme from the one or more authentication schemes supported at the authentication service for providing the security token in response to the received authentication request.

5 more elements

A computing device in a distributed computing system, the computing device comprising:

a processor;
and
a memory operatively coupled to the processor, the memory containing instructions executable by the processor, wherein the instructions, when executed, cause the computing device to:
provide an authentication service in the distributed computing system;
receive, at the authentication service provided by the computing device, an authentication request from a computing service;
dynamically select a particular authentication scheme, from multiple authentication schemes supported at the authentication service for the received authentication request, by analyzing, with the authentication service, the received authentication request for an indicator that the particular authentication scheme is supported by the computing service submitting the authentication request;
initiate, with the authentication service, an authentication process with the computing service according to the particular authentication scheme that is supported by both the computing service and the authentication service;
authenticate the authentication request, from the computing service, based on the initiated authentication process;
and
based on successful authentication of the authentication request, transmit, from the authentication service to the computing service, authentication data configured to authenticate the computing service to another computing service in the distributed computing system.

7 more elements

A computer-implemented method comprising:

receiving, at an authentication service, an authentication request from a computing service;
dynamically selecting a particular authentication scheme, from multiple authentication schemes supported at the authentication service for the received authentication request, by analyzing, at the authentication service, the received authentication request for an indicator that the particular authentication scheme is supported by the computing service submitting the authentication request;
initiating, with the authentication service, an authentication process with the computing service according to the particular authentication scheme that is supported by the computing service and the authentication service;
and
authenticating the authentication request from the computing service, using the initiated authentication process.

2 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/820,071Filed 16 Mar 2020
Published: US 2021/0288954 A116 Sep 2021
Granted: 27 Dec 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 9/3213
Involving a third party or a trusted authority: using tickets or tokens, e.g. Kerberos
H04L 63/0807
For authentication of entities: using tickets, e.g. Kerberos
G06F 9/44505
Program loading or initiating: configuring for program initiating, e.g. using registry, configuration files
H04L 9/14
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: using a plurality of keys…