Back to results
US 2008/0189778 A1Published application
Secure authentication in browser redirection authentication schemes
AssigneeRed Hat, Inc.
InventorPeter Andrew Rowley
Life of this patent
Estimating the term…
Abstract
A method and apparatus for authenticating a client is described. In one embodiment, an identity provider server authenticates the client that is redirected from a relying party server. The identity provider server authenticates the client without receiving a replayable credential from the client. Upon authentication of the client, the identity provider server transmits a token of authentication to the client.
Claims30
A computer-implemented method for authenticating a client, the method comprising:
- authenticating, by an identity provider server, the client redirected from a relying party server, wherein the identity provider server authenticates the client without receiving a replayable credential from the client;
- and
- transmitting a token of authentication to the client by the identity provider server upon authentication of the client.
An apparatus comprising:
- an identity provider server to authenticate a client redirected from a relying party server, to authenticate the client without receiving a replayable credential from the client, and transmit a token of authentication to the client upon authentication of the client.
An article of manufacture comprising:
- a machine-accessible storage medium including data that, when accessed by a machine, cause the machine to perform a method comprising:
- authenticating, by an identity provider server, a client redirected from a relying party server, wherein the identity provider server authenticates the client without receiving a replayable credential from the client;
- and
- transmitting a token of authentication to the client by the identity provider server upon authentication of the client.
1 more element
An apparatus for authenticating a client comprising:
- a network interface of an identity provider server to communicate with a client redirected from a relying party server;
- and
- means for authenticating the client without receiving a replayable credential from the client,
- wherein the network interface of the identity provider server to transmit a token of authentication to the client upon authentication of the client.
1 more element
Dependencies are inferred from the claim text.