Secure resource access
AssigneeHewlett-Packard Development Company, L.P.
InventorsWard Scott Foster, Robert John Madril JR., Shell Sterling Simpson
Life of this patent
Estimating the term…
Abstract
A method, computer readable media, and system for providing a first network resource with secure but limited access to a second network resource. A method embodiment of the invention includes associating a check with data identifying an expected source of a future request to access the second resource. Later, the first resource requests access to the second resource. Included in the request is a check signed with data identifying the first resource. The request is received and the check is authenticated. The request is granted only if the check is authentic and the data used to sign the check matches the expected source associated with the check.
Claims51
In a computer network, a method for granting a request from a first resource to access a second resource, comprising:
- associating a check with data identifying an expected source of a future request to access the second resource;
- receiving, from the first resource, a request to access the second resource, the request including the check and data identifying the first resource;
- authenticating the check;
- and
- granting the request to access the second resource only if the check is authentic and data identifying the first resource matches the data identifying the expected source associated with the check.
In a computer network, a method comprising:
- receiving a request for a check, the request including data identifying a first network resource;
- generating a check to be submitted by the first resource when requesting access to a second resource;
- associating the check with the data identifying the first resource;
- and
- returning the check.
In a computer network, a method for granting a request from a first resource to access a second resource, comprising:
- receiving a request for a check, the request including data identifying the first resource;
- generating a check;
- associating the check with the data identifying the first resource;
- providing the check to the first resource;
- receiving, from the first resource, a request to access the second resource, the request including a signed check;
- authenticating the check;
- and
- granting the request to access the second resource only if the check is authentic and is signed with data matching the data identifying the first resource associated with the check.
In a computer network, a method for granting a request from a first resource to access a second resource, comprising:
- receiving a request for a check, the request including data identifying the first resource;
- generating a check;
- associating the check with the data identifying the first resource;
- providing the check to the first resource;
- the first resource signing the check with data identifying the first resource;
- the first resource submitting the signed check with a request to access the second resource;
- authenticating the signed check;
- and
- granting the request to access the second resource only if the check is authentic and is signed with data matching the data identifying the first resource associated with the check.
Computer readable media having instructions for:
- associating a check with data identifying an expected source of a future request to access the second resource;
- receiving, from the first resource, a request to access the second resource, the request including the check and data identifying the first resource;
- authenticating the check;
- and
- granting the request to access the second resource only if the check is authentic and data identifying the first resource matches the data identifying the expected source associated with the check.
Computer readable media having instructions for:
- receiving a request for a check, the request including data identifying a first resource;
- generating a check to be submitted by the first resource when requesting access to a second resource;
- associating the check with the data identifying the first resource;
- and
- returning the check.
Computer readable media having instructions for:
- receiving a request for a check, the request including data identifying the first resource;
- generating a check;
- associating the check with the data identifying the first resource;
- returning the check;
- receiving, from the first resource, a request to access the second resource, the request including a signed check;
- authenticating the check comparing;
- and
- granting the request to access the second resource only if the check is authentic and is signed with data matching the data identifying the first resource associated with the check.
Computer readable media having instructions for:
- receiving a request for a check, the request including data identifying the first resource;
- generating a check;
- associating the check with the data identifying the first resource;
- providing the check to the first resource;
- directing the first resource to sign the check with data identifying the first resource;
- directing the first resource to submit the signed check with a request to access the second resource;
- authenticating the signed check;
- and
- granting the request to access the second resource only if the check is authentic and is signed with data matching the data identifying the first resource associated with the check.
An authentication system used to grant a first resource's request to access to a second resource, comprising:
- a check writer operable to generate and associate a check with data identifying an expected source of a future request to access the second resource;
- a resource server operable to receive a request to access the second resource, the request including a check and data identifying the first resource;
- a check verifier operable to authenticate the check;
- and
- a gate keeper operable to grant the request only if the check is authentic and the data identifying the first resource matches the data identifying the expected source.
In a computer network, a system comprising:
- a server operable to receive from a client a request for a check, the request including data identifying an expected source of a future request to access a network resource and to return a check to the client;
- and
- a check writer operable to generate a check to be submitted by the expected source when requesting access to the network resource, and to associate the check with the data identifying the expected source.
An authentication system used to grant a first resource's request to access to a second resource, comprising:
- a server operable to receive a request for a check, the request including data identifying an expected source of a future request to access the second resource and to return a check to the source of the request;
- a check writer operable to generate and associate the check with the data identifying the expected source;
- a resource server operable to receive a request to access the second resource, the request including a check with data identifying the first resource;
- a check verifier operable to authenticating the check;
- and
- a gate keeper operable to grant the request to access the second resource only if the check is authentic and is signed with data matching data identifying the expected source.
An authentication system used to grant a first resource's request to access to a second resource, comprising:
- a means for receiving a request for a check, the request including data identifying an expected source of a future request to access the second resource;
- a means for generating a check
- a means for associating the check with the data identifying the expected source;
- a means for returning the check to the source of the request for the check;
- a means for receiving a request to access the second resource, the request including a check with data identifying the first resource;
- a means for authenticating the check;
- and
- a means for granting the request to access the second resource only if the check is authentic and is signed with data matching data identifying the expected source.
Dependencies are inferred from the claim text.