Disconnected credential validation using pre-fetched service tickets
AssigneeQuest Software, Inc.
InventorsMatthew Peterson, Jeff Webb
Life of this patent
Estimating the term…
Loading patent…
AssigneeQuest Software, Inc.
InventorsMatthew Peterson, Jeff Webb
Estimating the term…
One or more user service tickets are obtained (i.e. pre-fetched) from an authentication server and stored in a ticket cache. The user service tickets facilitate a login device communicating with one or more users or group members associated with the login device. Login credentials for the users or group members may be subsequently authenticated against the user service tickets within the ticket cache thereby eliminating the need for immediate access to the authentication server or a previous login session by the users or group members. The user service tickets within the ticket cache may be refreshed as needed. In one embodiment, the user service tickets are refreshed daily and also in response to login attempts if the authentication service is readily accessible.
A computer readable medium bearing computer readable program codes configured to:
An apparatus to validate login credentials, the apparatus comprising:
The apparatus of claim 13, further comprising an authentication module configured to authenticate the selected party with the user service ticket.
The apparatus of claim 14, wherein the authentication module is further configured to receiving credentials from the selected party, generate a key for the selected party from the credentials, decrypt a portion of the user service ticket using the key for the selected party, and validate authentication data associated with the user service ticket.
The apparatus of claim 17, wherein the ticket pre-fetch module is further configured to refresh the user service ticket in response to an event selected from the group consisting of expiration of a selected interval, a change in user credentials, a login request, and a reboot cycle.
A system to validate login credentials, the system comprising:
The system of claim 19, further comprising an authentication module configured to authenticate the selected party with the user service ticket.
The system of claim 20, wherein the authentication module is further configured to receive credentials from the selected party, generate a key for the selected party from the credentials, decrypt a portion of the user service ticket using the key for the selected party, and validate authentication data associated with the user service ticket.
Dependencies are inferred from the claim text.