Remote authentication caching on a trusted client or gateway system
AssigneeInternational Business Machines Corporation
InventorsPhilip Lee Childs, Michael T. Vanover
Life of this patent
Estimating the term…
Abstract
In a system providing for user access of secure resources upon user authentication by a remote authentication server, a successful user authentication is saved locally for use when the authentication server is not available. The successful user authentication returns an authenticated credential which is stored on the local client utilizing a security method such as Public Key Infrastructure which prevents tampering with the credential. If a gateway machine provides connectivity between the client and the authentication server, the credential is also stored on the gateway.
Claims18
In a computer system providing access to at least one secure resource upon authentication of a user where said user authentication is performed by an authentication server in remote communication with a client in use by said user, a method of saving said user authentication for use when said authentication server is unavailable, the method comprising:
- submitting a user authentication request to said authentication server;
- in response to a successful user authentication;
- receiving an authenticated user credential which is unique to said user;
- storing said authenticated credential on said client utilizing a security method to prevent tampering with the credential;
- using said authenticated credential to access said at least one secure resource.
In a computer system providing access to at least one secure resource upon authentication of a user where said user authentication is performed by an authentication server in remote communication via a secure gateway with a client in use by said user, a method of caching said user authentication for use when said authentication server is unavailable, the method comprising:
- submitting a user authentication request to said authentication server;
- in response to a successful user authentication;
- receiving an authenticated user credential which is unique to said user;
- storing said authenticated credential on said client utilizing a security method to prevent tampering with the credential;
- storing said authenticated credential on said gateway utilizing a security method to prevent tampering with the credential;
- using said authenticated credential to access said at least one secure resource.
Dependencies are inferred from the claim text.