System and method for providing key management protocol with client verification of authorization
AssigneeGeneral Instrument Corporation
InventorAlexander Medvinsky
Life of this patent
Estimating the term…
Abstract
A method and system for providing a client (102) with a copy of the authorization data that can be accessed and used by the client. The method is well-suited to key management protocols that utilize the concept of tickets. Two copies of the authorization data, a client copy and a server copy, are included within and forwarded to the client where the client is requesting a ticket for a specific application server (106). The client is capable of accessing the client copy of the authorization data such that the client can verify requests, and determine authorization of use for content and/or services requested.
Claims24
A method of verifying client authorization when requesting content and/or services from an application server, comprising the steps of:
- generating a service ticket including a first copy of authorization data;
- and
- sending a second copy of the authorization data to a client;
- and
- sending the service ticket to the client.
A system for providing secure communication across the system, comprising:
- a key distribution center (KDC) first stage being configured to issue a ticket granting ticket (TGT) to a client;
- and
- a KDC second stage being configured to generate a ticket granting server reply including at least two copies of authorization data in response to a TGT received from the client.
A system for providing a client with access to content and/or services, comprising the steps of:
- a means for generating a service ticket including a first copy of authorization data;
- a means for generating a ticket granting server reply including the service ticket and a second copy of the authorization data;
- and
- a means for sending the ticket granting server reply to a client.
A system for providing secure communication across the system, comprising:
- a key distribution center (KDC) first stage being configured to issue a ticket granting ticket (TGT) and at least a client copy of authorization data to a client, wherein the client copy of the authorization data is configured such that the client is capable of determining client authorization;
- and
- a KDC second stage being configured to generate a ticket granting server reply.
Dependencies are inferred from the claim text.