Agentless single sign-on techniques
AssigneeCyberArk Software Ltd.
InventorsTomer DAYAN, Yaron NISIMOV
Life of this patent
Estimating the term…
Abstract
Described herein are methods, systems, and computer-readable storage media for using a network identity. Techniques may include obtaining and encrypting a first data element using an encryption key and storing the encrypted first data element mapped to a network identity. Techniques may further include receiving a request from the network identity to perform an action on a resource and authenticating the network identity using an existing protocol, decrypting the first data element using a second data element calculated based on standard fields of the existing protocol, and enabling the action on the resource using the first data element.
Claims22
A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations when using a network identity, the operations comprising:
- obtaining a first data element;
- encrypting the first data element using an encryption key;
- storing the encrypted first data element, wherein the encrypted first data element is mapped to a network identity;
- receiving a request from the network identity to perform an action on a resource distinct from the network identity;
- authenticating the network identity using an existing protocol, wherein the authentication is independent of the action and the resource;
- decrypting the first data element using a second data element calculated based on standard fields of the existing protocol, wherein the first data element is associated with the requested action;
- and
- performing the action on the resource using the first data element.
A computer-implemented method for performing operations when using a network identity, the operations comprising:
- obtaining a first data element;
- encrypting the first data element using an encryption key;
- storing the encrypted first data element, wherein the encrypted first data element is mapped to a network identity;
- receiving a request from the network identity to perform an action on a resource distinct from the network identity;
- authenticating the network identity using an existing protocol, wherein the authentication is independent of the action and the resource;
- decrypting the first data element using a second data element calculated based on standard fields of the existing protocol, wherein the first data element is associated with the requested action;
- and
- performing the action on the resource using the first data element.
An authentication system comprising:
- one or more memory devices storing processor-executable instructions;
- and
- one or more processors configured to execute instructions to cause the authentication system to perform operations comprising:
- obtaining a first data element;
- encrypting the first data element using an encryption key;
- storing the encrypted first data element, wherein the encrypted first data element is mapped to a network identity;
- receiving a request from the network identity to perform an action on a resource distinct from the network identity;
- authenticating the network identity using an existing protocol, wherein the authentication is independent of the action and the resource;
- decrypting the first data element using a second data element calculated based on standard fields of the existing protocol, wherein the first data element is associated with the requested action;
- and
- performing the action on the resource using the first data element.
Dependencies are inferred from the claim text.