Back to results
US 2019/0166129 A1Published application
Trusted client security factor-based authorizations at a server
AssigneeOracle International Corporation
InventorsScott Gaetjen, Patrick F. Sack, William Maroulis, Matthew S. Piermarini
Life of this patent
Estimating the term…
Abstract
Trusted client security factor-based authorizations at a server. The techniques allow the server to authorize client requested operations to access a protected resource or service based on trusted client security factors that are obtained at client machines and provided to the server.
Claims20
A method comprising:
- at a client machine comprising one or more processors:
- using a cryptographic hash algorithm to compute a machine registration digest;
- wherein both of the following are provided as input to the cryptographic hash algorithm to compute the machine registration digest:
- (a) a digest of a client program installed on the client machine, and (b) a machine identifier of the client machine;
- the client program sending the machine registration digest to a server;
- the client program receiving instruction from the server to collect one or more specified client security factors;
- based on the receiving the instruction from the server, the client program collecting the one more specified client security factors at the client machine;
- the client program providing the one or more specified client security factors collected at the client machine to the server;
- the client program sending a request to the server, the request including a command to access a resource protected by the server;
- and
- wherein the server authorizes the command to access the resource based on at least one of the one or more client security factors collected at the client machine and provided to the server.
8 more elements
A method comprising:
- at a server comprising one or more processors and storage media:
- receiving a machine registration digest from a client machine;
- verifying existence of a registration entry in a trusted machine registry containing the machine registration digest;
- based on the verifying existence of the registration entry, sending instruction to the client machine to collect one or more specified client security factors;
- receiving the one or more specified client security factors collected by the client machine from the client machine;
- setting the one or more client security factors received from the client machine in a server session;
- receiving a request from the client machine, the request including a command to access a resource protected by the server;
- and
- authorizing access to the resource protected by the server based on at least one of the one or more client security factors set in the server session.
6 more elements
A system comprising:
- a plurality of processors;
- storage media;
- and
- a plurality of programs stored in the storage media, each program of the plurality of programs configured for execution by at least one of the plurality of processors, the plurality of programs comprising instructions configured for:
- computing a machine registration digest based on both:
- (a) a digest of a client program of the plurality of programs, and (b) an identifier of a client machine;
- verifying existence of a trusted machine registration entry containing the machine registration digest;
- based on the verifying existence of the trusted machine registration entry, sending instruction to the client machine to collect one or more specified client security factors;
- receiving the one or more specified client security factors collected by the client machine from the client machine;
- setting the one or more client security factors received from the client machine in a server session;
- receiving a request from the client machine, the request including a command to access a resource protected by the server;
- and
- authorizing access to the resource protected by the server based on at least one of the one or more client security factors set in the server session.
10 more elements
Dependencies are inferred from the claim text.