Method for authenticating kerberos users from common web browsers

In a communications network comprising at least one client, a gateway server, and at least one service provider, which are communicatively coupled to each other via the Internet, wherein said gateway server is coupled to a key distribution center (KDC) which comprises an authentication server (AS) and a ticket granting server (TGS), a method for authenticating a user from common web browsers, comprising the steps of:

• logging in by entering said user's identification and password from a browser in a client;
• creating, using JavaScript, a first request packet based on said user's identification;
• submitting said first request packet to said KDC, wherein said AS makes up a session key and a first ticket for said TGS;
• returning, by said KDC, a failure message or a first reply packet to said gateway server;
• if a first reply message is returned, decrypting, by JavaScript, said first reply packet using said user's password;
• storing said session key and said first key in said gateway server's secure domain cookie;
• submitting, by said client, a service request to a service provider;
• redirecting, by said service provider, said service request with said service provider's identification to said gateway server;
• creating, by said gateway server, a second request packet based on said session key, said first ticket, and said service provider's identification;
• submitting, by said gateway server, said second request packet to said KDC, wherein said TGS grants a second ticket for said service provider;
• returning, by said KDC, a failure message or a second reply packet to said gateway server, and
• if a second reply packet is returned, decrypting, by said gateway server, said second reply packet to extract said second ticket;
• redirecting, by said gateway server, said service request with said second ticket to said service provider;
• and
• authenticating said user by checking said second ticket.

A communications network comprising:

• at least one client communicatively coupled to the Internet;
• at least one service provider communicatively coupled to the Internet;
• a key distribution center communicatively coupled to the Internet;
• and
• a gateway server for converting information from a normal browser in a client to data traffic acceptable for said key distribution center.