US 6,198,824 B1 · System for providing secure remote command execution network

Abstract

A method and apparatus is disclosed for enhancing the security of a message sent through a network server from a client computer to a destination server. A secure connection for receiving and transmitting data is established between the client computer and the network server. Using client-identifying information and a secure authentication protocol, the network server may then obtain client-authentication information from a validation center. The client-authentication information is transmitted to the client and erased from the network server. The network server then receives the client-authenticating information back from the client with an accompanying message for the destination server. The network server may use the client-authenticating information to obtain permission data from the validation center for use in accessing the destination server.

Claims13

Dependent claims

A system having a key distribution center and having improved security for a message sent over an insecure network from a client computer to a destination server via a network server, the system comprising:

a security protocol interface configured to establish communication over the insecure network with a first type of security between the client computer and the network server;
an authentication protocol interface configured to obtain first client-authenticating information from the key distribution center and to provide the first client-authenticating information obtained to the network server to establish communication over the insecure network with a second type of security;
the network server configured to transmit the first client-authenticating information to the client computer;
the client computer configured to transmit the message and the first client-authenticating information to the network server;
and
the network server configured to obtain permission from the key distribution center to access the destination server over the insecure network using second client-authenticating information.

3 more elements

A network comprising a client computer, a key distribution center, and a destination computer capable of being operatively coupled to a network server of the network, the network comprising:

a client network interface of the network server configured to receive client-identifying information from the client computer;
a security protocol network interface of the network server configured to provide at least a portion of the client-identifying information to the key distribution center and to receive first client-authenticating information from the key distribution center;
a pass-through interface of the network server configured to transmit at least a portion of the client-identifying information and a portion of first client-authenticating information to the client computer via the client networking interface, the pass-through interface configured to receive the at least a portion of the client-identifying information and the portion of the first-client-authenticating information in order to obtain second client-authenticating information from the key distribution center;
and
a destination computer network interface of the network server configured to communicate with the destination computer using at least a portion of the second client-authenticating information.

2 more elements

Dependencies are inferred from the claim text.

System for providing secure remote command execution network

Life of this patent

System for providing secure remote command execution network

Life of this patent

Abstract

Claims13