Back to results
US 11,777,737 B2Granted
Trusted client security factor-based authorizations at a server
AssigneeOracle International Corporation
InventorsScott Gaetjen, Patrick F. Sack, William Maroulis, Matthew S. Piermarini
Life of this patent
Estimating the term…
Abstract
Trusted client security factor-based authorizations at a server. The techniques allow the server to authorize client requested operations to access a protected resource or service based on trusted client security factors that are obtained at client machines and provided to the server.
Claims18
A method comprising:
- receiving, through a network connection, a cryptographic machine registration digest from a client machine;
- sending, to a client program installed on the client machine and responsive to said receiving the cryptographic machine registration digest from the client machine, an instruction to collect one or more requested security factors selected from a group consisting of:
- an operating system version of the client machine,
- information collected from a trusted platform module (TPM) device of the client machine,
- an operating system kernel patch level of the client machine,
- a list of filters or daemons that are enabled at the client machine,
- information collected from an operating system registry of the client machine,
- information collected from a Hypertext Transfer Protocol (HTTP) session at the client machine,
- information obtained from a Hypertext Transfer Protocol (HTTP) cookie at the client machine, and
- a result obtained at the client machine from a representational state transfer (REST) request;
- receiving, through the network connection, the one or more requested security factors collected by the client program based on the sending the instruction;
- establishing, based on the cryptographic machine registration digest and the one or more requested security factors collected by the client program based on the sending the instruction, a trusted session;
- receiving in the trusted session, from the client program, a request comprising a command to access a protected resource or a protected service;
- and
- allowing the command to access the protected resource or the protected service based on at least one of the one or more requested security factors;
- wherein the method is performed by a server machine.
13 more elements
One or more non-transitory computer-readable media storing one or more programs, the one or more programs comprising instructions which, when executed by a server machine having one or more processors, are capable of causing the server machine to perform:
- receiving, through a network connection, a cryptographic machine registration digest from a client machine;
- sending, to a client program installed on the client machine and responsive to said receiving the cryptographic machine registration digest from the client machine, an instruction to collect one or more requested security factors selected from a group consisting of:
- an operating system version of the client machine,
- information collected from a trusted platform module (TPM) device of the client machine,
- an operating system kernel patch level of the client machine,
- a list of filters or daemons that are enabled at the client machine,
- information collected from an operating system registry of the client machine,
- information collected from a Hypertext Transfer Protocol (HTTP) session at the client machine,
- information obtained from a Hypertext Transfer Protocol (HTTP) cookie at the client machine, and
- a result obtained at the client machine from a representational state transfer (REST) request;
- receiving, through the network connection, the one or more requested security factors collected by the client program based on the sending the instruction;
- establishing, based on the cryptographic machine registration digest and the one or more requested security factors collected by the client program based on the sending the instruction, a trusted session;
- receiving in the trusted session, from the client program, a request comprising a command to access a protected resource or a protected service;
- and
- allowing the command to access the protected resource or the protected service based on at least one of the one or more requested security factors.
12 more elements
A server machine comprising:
- one or more hardware processors;
- storage media;
- and
- a plurality of programs stored in the storage media, each program of the plurality of programs configured for execution by at least one of the one or more hardware processors, the plurality of programs comprising instructions which, when executed by the one or more hardware processors, are capable of causing the one or more hardware processors to perform:
- receiving, through a network connection, a cryptographic machine registration digest from a client machine;
- sending, to a client program installed on the client machine and responsive to said receiving the cryptographic machine registration digest from the client machine, an instruction to collect one or more requested security factors selected from a group consisting of:
- an operating system version of the client machine,
- information collected from a trusted platform module (TPM) device of the client machine,
- an operating system kernel patch level of the client machine,
- a list of filters or daemons that are enabled at the client machine,
- information collected from an operating system registry of the client machine,
- information collected from a Hypertext Transfer Protocol (HTTP) session at the client machine,
- information obtained from a Hypertext Transfer Protocol (HTTP) cookie at the client machine, and
- a result obtained at the client machine from a representational state transfer (REST) request;
- receiving, through the network connection, the one or more requested security factors collected by the client program based on the sending the instruction;
- establishing, based on the cryptographic machine registration digest and the one or more requested security factors collected by the client program based on the sending the instruction, a trusted session;
- receiving in the trusted session, from the client program, a request comprising a command to access a protected resource or a protected service;
- and
- allowing the command to access the protected resource or the protected service based on at least one of the one or more requested security factors.
16 more elements
Dependencies are inferred from the claim text.