Secondary credentials for batch system
AssigneeMicrosoft Corporation
InventorsDavid L. Christiansen, Chris Crall, John Michener, Yi Zeng, Haitao Li
Life of this patent
Estimating the term…
Abstract
A batch job system may create a second set of credentials for a user and associate the second set of credentials with the user in an authentication server. The second set of credentials may allow computers running the batch jobs to have user-level authentication for execution and reporting of results. The second set of credentials may be a single sign on type of credential, and may consist of a virtual smartcard that each worker computer may use for authentication. In some embodiments, authentication requests may be routed to a virtual or physical Hardware Security Module.
Claims20
A method performed on a computer processor, said method comprising:
- receiving a connection request from a client device, said connection request comprising a user identity;
- authenticating said user identity by receiving a first set of user credentials from said client device and authenticating said first set of user credentials against an authentication server;
- receiving a batch job from said client device;
- determining a second set of user credentials, and causing said second set of user credentials to be associated with said user identity at said authentication server;
- identifying a computing device to perform said batch job;
- and
- transmitting said batch job to said computing device such that said batch job is executed with said second set of user credentials.
A system comprising:
- an authentication server that receives authentication requests and authenticates valid authentication requests;
- and
- a controlling server having a processor, said controlling server using said processor to:
- receive a batch job request from a client device, said batch job request comprising a user identity;
- authenticate said user identity against said authentication server using a first set of credentials received from said client device;
- determine a second set of credentials;
- cause said authentication server to associate said second set of credentials with said user identity;
- identify a computing service to perform said batch job;
- and
- transmit said batch job to said computing service such that said computing service may execute said batch job using said second set of credentials.
A method performed on a computer processor, said method comprising:
- receiving a first authentication request from a user, said first authentication request comprising a first set of credentials;
- authenticating said first authentication request against an authentication server using said first set of credentials and creating an authenticated session;
- receiving a first batch job from said user through said authenticated session;
- determining a remote computing service to perform said batch job;
- identifying a second set of credentials and associating said second set of credentials to said user by transmitting said second set of credentials to said authentication server, said second set of credentials being a smartcard certificate;
- and
- creating a secure communications path to said remote computing service and transmitting said batch job to said remote computing service through said secure communications path such that said remote computing service may execute said batch job using said second set of credentials.
Dependencies are inferred from the claim text.