System and method for single sign-on to a plurality of network elements
AssigneeMCI Communications Corporation
InventorJingsha He
Life of this patent
Estimating the term…
Abstract
A secured network permits a single sign-on ("SSO") of users to a plurality of network elements. Data structures, procedures and system components that support the SSO functionality in a distributed networked environment are included in the secured network. The SSO functionality can be implemented and integrated into an existing network platform or used as the backbone protocol to new network installations. DCE-based features as well as ERA and EAC can be utilized as the foundation for the implementation. The SSO functionality may be implemented and integrated without requiring significant low level development or major modifications in a network.
Claims9
In a network having a security server coupled to a data traffic network, a programmed method of permitting the single sign-on of a plurality of user stations to any of a plurality of available network elements, the method comprising the steps of:
- opening a user account that indicates access to a specific network element;
- enabling the single sign-on capability for said user account;
- setting a single sign-on capability indicator digit in said user account;
- generating a log-on identifier for said specific network element;
- generating a new password for said user account;
- checking said new password against an organization specific password policy to ensure its integrity;
- invoking a password initialization procedure to set said log-on identifier and said new password;
- saving said user account in a centralized security database on said security server, said user account containing an identifier field for said specific network element and said log-on identifier, present password and new password;
- and
- setting up said specific network element with said user account.
A secured network architecture for the single sign-on of a user to a plurality of network elements comprising:
- a data network;
- a security server communicably coupled to said data network;
- a plurality of security applications stored on said security server;
- a centralized security database defining a plurality of user access privileges, said database stored on said security server and read/write accessible by said security applications, said database including:
- a plurality of user account records containing at least a single sign-on user indication digit, a user log-on identifier, present password and new password for each of said plurality of network elements to which a user has access;
- and
- a plurality of network element account records containing at least a super-user log-on identifier, present password and new password for each of said plurality of network elements;
- a terminal server providing an asynchronous serial communications bridge between said security server and said plurality of network elements;
- and
- a plurality of user nodes communicably coupled to said data network, wherein some of said user nodes are connected locally to said data network via a local area network and some are connected remotely via a dial-up configuration for communicating with said plurality of network elements.
Dependencies are inferred from the claim text.