Back to results
US 2017/0323095 A1Published application
Method and system for enterprise network single-sign-on by a manageability engine
AssigneeIntel Corporation
InventorsNed M. Smith, Purushottam Goel
Life of this patent
Estimating the term…
Abstract
A manageability engine (ME) receives an authentication response from a user during pre-boot authentication and registers the user with a key distribution center (KDC), indicating that the user has successfully authenticated to the PC. The KDC supplies the ME with single-sign-on credentials in the form of a Key Encryption Key (KEK). The KEK may later be used by the PC to obtain a credential used to establish secure access to Enterprise servers.
Claims18
A secure access method using a manageability engine comprising:
- receiving an authentication response from a user during a pre-boot operation;
- employing a protocol to register with a key distribution center (KDC);
- and
- receiving single-sign-on credentials in the form of a key encryption key (KEK), wherein the KEK is later used to obtain a credential used to establish secure access to Enterprise servers.
1 more element
A manageability engine (ME) secure access method comprising:
- receiving user authentication credentials from a pre-boot authentication module (PBAM);
- requesting a key encryption key (KEK) from an Enterprise;
- receiving the KEK if the user is authenticated by the Enterprise and securely storing the KEK;
- enabling a BIOS to proceed with booting of an operating system (OS);
- receiving a request for the KEK from a shim used to intercept an OS login process;
- retrieving the KEK from secure storage;
- and
- sending the KEK to the OS, wherein the shim, upon receipt of the KEK suppresses the OS login prompt and completes booting of the OS;
- wherein when the OS requires access to the Enterprise server, the OS retrieves the KEK from the ME to obtain a ticket specific to the Enterprise server.
6 more elements
An article comprising:
- a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed by a processor, the instructions provide for receiving an authentication response from a user during a pre-boot operation;
- employing a protocol to register with a key distribution center (KDC);
- and
- receiving single-sign-on credentials in the form of a key encryption key (KEK), wherein the KEK is later used to obtain a credential used to establish secure access to Enterprise servers.
1 more element
Dependencies are inferred from the claim text.