Authentication of plugins in a virtualized computing environment
AssigneeVMware, Inc.
InventorsTony GANCHEV, Tihomir MATEEV
Life of this patent
Estimating the term…
Abstract
Plugins are authenticated for purposes of accessing and using application program interfaces (APIs) of a management service of a virtualized computing environment. In an authentication process, each plugin is associated with a session ticket that is unique to the plugin. The session ticket may be in the form of a single-use token that has a finite duration, and which may be used by the plugin to establish a session with the APIs of the management service. Because of the single-use and finite duration constraints of the token, the plugin is unable to use the token for other sessions and other plugins are also unable to use the same token to conduct their own sessions with the management service.
Claims21
A method to authenticate a first plugin to enable the first plugin to interact with a management server in a virtualized computing environment, the method comprising:
- using a session identification (ID), uniquely associated with the first plugin, to obtain a session ticket, wherein the session ticket is uniquely associated with the first plugin and is configured with a finite validity;
- and
- using the session ticket to authorize the first plugin to access the management server for a first session with the management server,
- wherein the finite validity prevents use of the session ticket, by the first plugin, for a second session with the management server, and
- wherein the finite validity prevents use of the session ticket, by at least a second plugin, for authenticated sessions with the management server.
A non-transitory computer-readable medium having instructions stored thereon, which in response to execution by one or more processors, cause the one or more processors to perform or control performance of operations to authenticate a first plugin to enable the first plugin to interact with a management server in a virtualized computing environment, the operations comprising:
- using a session identification (ID), uniquely associated with the first plugin, to obtain a session ticket, wherein the session ticket is uniquely associated with the first plugin and is configured with a finite validity;
- and
- using the session ticket to authorize the first plugin to access the management server for a first session with the management server,
- wherein the finite validity prevents use of the session ticket, by the first plugin, for a second session with the management server, and
- wherein the finite validity prevents use of the session ticket, by at least a second plugin, for authenticated sessions with the management server.
A computing device, comprising:
- one or more processors;
- and
- a non-transitory computer-readable medium having instructions stored thereon, which in response to execution by the one or more processors, cause the one or more processors to perform or control performance of operations to authenticate a first plugin to enable the first plugin to interact with a management server in a virtualized computing environment, wherein the operations include:
- use a session identification (ID), uniquely associated with the first plugin, to obtain a session ticket, wherein the session ticket is uniquely associated with the first plugin and is configured with a finite validity;
- and
- use the session ticket to authorize the first plugin to access the management server for a first session with the management server,
- wherein the finite validity prevents use of the session ticket, by the first plugin, for a second session with the management server, and
- wherein the finite validity prevents use of the session ticket, by at least a second plugin, for authenticated sessions with the management server.
Dependencies are inferred from the claim text.