Determining the visibility to a remote database client
AssigneeSiebel Systems, Inc.
InventorsThomas M. Rothwein, John L. Coker
Life of this patent
Estimating the term…
Abstract
A method and system for establishing and maintaining a secure TCP/IP session between a server (1) having a database (3) and a client (21-a, 21-b, 21-c), the method includes sending a hello message from the client to the server (1) to establish client authorization, the server (1) sends a server session ID and a session private key to the client to establish the session.
Claims43
A method of establishing and maintain a secure communication session between a server having a database and a client having an associated public key, comprising:
- (a) sending a message including the client's public key from the client to the sever;
- (b) establishing client authorization at the server;
- (c) encrypting a server session id using the client's public key;
- (d) sending the encrypted server session id and a session private key from the server to the client;
- and
- (e) sending a request message from said client to said server, said request message including a monotonically increasing message identifier.
A system for establishing and maintaining a secure communication session between a server having a database and a client having an associated public key, wherein the system is configured to:
- (a) send a message including the client's public key from the client to the server;
- (b) establish client authorization at the server
- (c) encrypt a server session id using the client's public key;
- (d) send the encrypted server session id and a session private key from the server to the client;
- and
- (e) send a request message from said client to said server, said request message including a monotonically increasing message identifier.
A system for establishing and maintaining a secure TCP/IP session, said system comprising:
- (a) a server in communication with a database, said server adapted to receive messages;
- (b) a client sending a message to said server, wherein said message includes a public key associated with said client;
- (c) an authorization system authorizing the client at the server;
- and
- (d) an encryption system encrypting a server session id using said public key;
- (e) wherein said server sends the encrypted server session id and a session private key to said client, and said client sends a request message to said server, said request message including a monotonically increasing identifier.
A method of establishing and maintaining a secure communication session between a server having a database and a client, comprising:
- receiving a first message from a database client, said first message including a client public key;
- generating a session identifier associated with a communication session;
- generating a private key associated with said database client;
- encrypting, with said public key, said session identifier and said private key in a second message;
- sending said second message to said database client;
- and
- receiving a request message from said database client, wherein said request message includes a monotonically increasing message identifier.
A method of establishing and maintaining a secure communication session between a server having a database and a client, comprising:
- sending a first message to a server, said first message including a client public key;
- receiving a second message from said server, said second message encrypted with said client public key;
- decrypting said second message with a client private key;
- extracting a session identifier and a session private key from said decrypted second message;
- generating a request message, wherein said request message includes a monotonically increasing message identifier;
- and
- encrypting said request message with said session private key.
A computer program product for enabling a processor in a computer system to implement a system for establishing and maintaining a secure communication session between a server having a database and a client, said computer program product comprising:
- a computer usable medium having computer readable program code means embodied in said computer usable medium for causing a program to execute on the computer system, said computer readable program code means comprising:
- means for enabling the computer system to receive a first message from a database client, said first message including a client public key;
- means for enabling the computer system to generate a session identifier associated with a communication session;
- means for enabling the computer system to generate a private key associated with said database client;
- means for enabling the computer system to encrypt, with said public key, said session identifier and said private key in a second message;
- means for enabling the computer system to send said second message to said database client;
- and
- means for enabling the computer system to receive a request message from said database client, wherein said request message includes a monotonically increasing message identifier.
A computer program product for enabling a processor in a computer system to implement a system for establishing and maintaining a secure communication session between a server having a database and a client, said computer program product comprising:
- a computer usable medium having computer readable program code means embodied in said computer usable medium for causing a program to execute on the computer system, said computer readable program code means comprising:
- means for enabling the computer system to send a first message to a server, said first message including a client public key;
- means for enabling the computer system to receive a second message from said server, said second message encrypted with said client public key;
- means for enabling the computer system to decrypt said second message with a client private key;
- means for enabling the computer system to extract a session identifier and a session private key from said decrypted second message;
- means for enabling the computer system to generate a request message, wherein said request message includes a monotonically increasing message identifier;
- and
- means for enabling the computer system to encrypt said request message with said session private key.
A method of establishing and maintaining a secure communication session between a server having a database and a client having an associated public key, comprising:
- (a) sending a message including the client's public key from the client to the server;
- (b) establishing client authorization at the server;
- (c) encrypting a server session id using the client's public key;
- (d) sending the encrypted server session id and a session private key from the server to the client;
- and
- (e) sending a request message from said client to said server, said request message including an identifier to prevent said request message from being replayed.
A method of establishing and maintaining a secure communication session between a server having a database and a client, comprising:
- receiving a first message from a database client, said first message including a client public key;
- establishing authorization for said database client;
- generating a session identifier associated with a communication session;
- generating a private key associated with said database client;
- encrypting, with said public key, said session identifier and said private key in a second message;
- sending said second message to said database client;
- and
- receiving a request message from said database client, said request message including an identifier to prevent said request message from being replayed.
Dependencies are inferred from the claim text.