Back to results
US 2005/0091171 A1Published application
Server pool kerberos authentication scheme
AssigneeIntel Corporation
InventorSteven Grobman
Life of this patent
Estimating the term…
Abstract
The present disclosure relates to the authenticating a client against a pool of servers utilizing a secure authentication protocol, and, more specifically, to the authenticating a client against a pool of servers providing a common service, utilizing the Kerberos secure authentication protocol.
Claims50
A method of generating a Service Ticket for a requested Service comprising:
- receiving a request for a Service Ticket from a client;
- generating a session key;
- encrypting a cipher text with the session key determining a number of servers designated to provide the requested service;
- for each providing server, encrypting the session key with a secret key associated with each respective server;
- creating a Service Ticket that includes an encrypted session key for each providing server, and the encrypted cipher text;
- and
- transmitting the Service Ticket to the client.
4 more elements
A method of authenticating a client's request for a service provided by a service pool comprising;
- a server receiving a Service Ticket having at least one encrypted session key, and an encrypted cipher text;
- decrypting the encrypted session key associated with the receiving server utilizing a secret key associated with the receiving server;
- decrypting the cipher text utilizing the decrypted session key;
- and
- providing the service to the client.
2 more elements
A Key Distribution Center comprising:
- an Authentication Service that is capable of
- authenticating that a client may legitimately access the Key Distribution Center, and
- issuing a Ticket-Granting-Ticket to the client;
- and
- a Ticket Granting Service that is capable of
- accepting the Ticket-Granting-Ticket from the client, and
- issuing a Multi-Server Service Ticket to the client;
- and
- wherein the Multi-Server Service Ticket allows the client access a network service that is provided by a plurality of servers.
6 more elements
A system comprising:
- a Key Distribution Center having:
- an Authentication Service that is capable of
- authenticating that a client may legitimately access the Key Distribution Center, and
- issuing a Ticket-Granting-Ticket to the client;
- and
- a Ticket Granting Service that is capable of
- accepting the Ticket-Granting-Ticket from the client, and
- issuing a Multi-Server Service Ticket to the client;
- a plurality of servers that are each capable of providing the client with a network service;
- and
- wherein the Multi-Server Service Ticket allows the client access the network service provided by the plurality of servers.
8 more elements
An article comprising:
- a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed, the instructions provide for:
- receiving a request for a Service Ticket from a client;
- generating a session key;
- encrypting a cipher text with the session key
- determining the number of servers designated to provide the requested service;
- for each providing server, encrypting the session key with a secret key associated with each respective server;
- creating a Service Ticket that includes an encrypted session key for each providing server, and the encrypted cipher text;
- and
- transmitting the Service Ticket to the client.
6 more elements
An article comprising:
- a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed, the instructions provide for:
- a server receiving a Service Ticket having at least one encrypted session key, and an encrypted cipher text;
- decrypting the encrypted session key associated with the receiving server utilizing a secret key associated with the receiving server;
- decrypting the cipher text utilizing the decrypted session key;
- and
- providing the service to the client.
3 more elements
Dependencies are inferred from the claim text.