Back to results
US 2014/0143847 A1Published application
System for and method of providing single sign-on (sso) capability in an application publishing environment
AssigneeGraphOn Corporation
InventorWilliam Tidd
Life of this patent
Estimating the term…
Abstract
A client-server computing system includes a computer cluster for hosting certain resources, applications, programs, processes, files, and/or data that are published to users who are accessing the computer cluster remotely. The computer cluster includes a network of one or more host computers, a gateway server, a gateway service database, and a user database. A single sign-on (SSO) method of the disclosure includes performing a computer cluster authentication process in which a user enters his/her credentials followed by a resource authentication process in which there is no need for the user to reenter his/her credentials, having entered them already in the computer cluster authentication process.
Claims19
A method for providing single-sign-on capability, the method comprising:
- receiving at a gateway service a connection request sent by a host computer, the connection request comprising identifying information associated with the host computer;
- executing instructions stored in memory of the gateway service, wherein execution of the instructions by a processor of the gateway service:
- queries a host table stored in memory regarding a host record that corresponds to the host computer, wherein the host computer is authenticated based on comparison of the identifying information against the corresponding host record,
- grants the connection request from the host computer, wherein the host computer joins a cluster of host computers associated with the gateway service and is visible to a client device,
- authenticates a user of the client device to the host computer based on credentials provided by the user, and
- automatically erases user credentials from memory of the gateway service subsequent to successful authentication of the user credentials on the host computer;
- receiving at the gateway service a subsequent access request regarding another host computer in the cluster;
- and
- forwarding the subsequent access request from the gateway service to the selected initial host computer for authentication based on the credentials.
6 more elements
An apparatus for providing single-sign-on capability, the apparatus comprising:
- a communication interface for receiving at a gateway service a connection request sent by a host computer, the connection request comprising identifying information associated with the host computer;
- a processor for executing instructions stored in memory of the gateway service, wherein execution of the instructions by the processor of the gateway service:
- queries a host table stored in memory regarding a host record that corresponds to the host computer, wherein the host computer is authenticated based on comparison of the identifying information against the corresponding host record,
- grants the connection request from the host computer, wherein the host computer joins a cluster of host computers associated with the gateway service and is visible to a client device,
- authenticates a user of the client device to the host computer based on credentials provided by the user, and
- automatically erases user credentials from memory of the gateway service subsequent to successful authentication of the user credentials on the host computer;
- wherein the communication interface at the gateway service:
- receives a subsequent access request regarding another host computer in the cluster, and
- forwards the subsequent access request from the gateway service to the selected initial host computer for authentication based on the credentials.
6 more elements
A system for providing single-sign-on capability, the system comprising:
- a cluster comprising a plurality of host computers;
- and
- a gateway service comprising:
- a communication interface for receiving at a gateway service a connection request sent by a host computer, the connection request comprising identifying information associated with the host computer;
- and
- a processor for executing instructions stored in memory of the gateway service, wherein execution of the instructions by the processor of the gateway service:
- queries a host table stored in memory regarding a host record that corresponds to the host computer, wherein the host computer is authenticated based on comparison of the identifying information against the corresponding host record,
- grants the connection request from the host computer, wherein the host computer joins a cluster of host computers associated with the gateway service and is visible to a client device,
- authenticates a user of the client device to the host computer based on credentials provided by the user, and
- automatically erases user credentials from memory of the gateway service subsequent to successful authentication of the user credentials on the host computer;
- wherein the communication interface at the gateway service:
- receives a subsequent access request regarding another host computer in the cluster, and
- forwards the subsequent access request from the gateway service to the selected initial host computer for authentication based on the credentials.
10 more elements
A non-transitory computer-readable storage medium, having embodied thereon a program executable by a processor to perform a method for providing single-sign-on capability, the method comprising:
- receiving a connection request sent by a host computer, the connection request comprising identifying information associated with the host computer;
- querying a host table regarding a host record that corresponds to the host computer, wherein the host computer is authenticated based on comparison of the identifying information against the corresponding host record;
- granting the connection request from the host computer, wherein the host computer joins a cluster of host computers associated with the gateway service and is visible to a client device;
- authenticating a user of the client device to the host computer based on credentials provided by the user;
- automatically erasing user credentials subsequent to successful authentication of the user credentials on the host computer;
- receiving at the gateway service a subsequent access request regarding another host computer in the cluster;
- and
- forwarding the subsequent access request from the gateway service to the selected initial host computer for authentication based on the credentials.
5 more elements
Dependencies are inferred from the claim text.