Validating connections to a network system
AssigneeCisco Technology, Inc.
InventorJan Vilhuber
Life of this patent
Estimating the term…
Abstract
A mechanism for authenticating multiple connections to a network server is disclosed. A client establishes a first connection to the server. In establishing the first connection, the client provides authentication information and authorization information, and in response the server assigns first access privileges to the client. When the client requests a second connection, the server receives authentication information from the client, and assigns limited access privileges to the client. The server associates the first connection with the second connection and the client. The server automatically associates the first access privileges with the second connection, without requiring the client to provide authorization information for the second connection.
Claims63
A method for establishing connections between a client and a network access server, the method comprising the steps of:
- receiving a request to establish a connection between the client and the server;
- performing client authentication by determining whether the client is allowed to connect to the server;
- performing user authentication by determining whether the user is allowed to access the server;
- and
- performing user authorization by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the connection with the set of user access privileges.
A computer-readable medium carrying one or more sequences of instructions for establishing connections between a client and a network access server, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:
- receiving a request to establish a connection between the client and the server;
- performing client authentication by determining whether the client is allowed to connect to the server;
- performing user authentication by determining whether the user is allowed to access the server;
- and
- performing user authorization by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the connection with the set of user access privileges.
An apparatus for establishing connections between a client and a network access server, the apparatus comprising:
- means for receiving a request to establish a connection between the client and the server;
- means for performing client authentication by determining whether the client is allowed to connect to the server;
- means for performing user authentication by determining whether the user is allowed to access the server;
- and
- means for performing user authorization using
- means for determining a set of user access privileges based on user access information;
- and
- means for replacing a set of client access privileges assigned to the connection with the set of user access privileges.
A computer apparatus comprising:
- a processor;
- and
- a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing connections between a client and a network access server, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of:
- receiving a request to establish a connection between the client and the server;
- performing client authentication by determining whether the client is allowed to connect to the server;
- performing user authentication by determining whether the user is allowed to access the server;
- and
- performing user authorization by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the connection with the set of user access privileges.
A computer-readable medium carrying one or more sequences of instructions for establishing multiple connections between a client and a network access server, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:
- receiving a request to establish a first connection between the client and the server;
- performing a first client authentication phase, wherein the first client authentication phase determines whether the client is allowed to connect to the server;
- performing a client authorization phase, wherein the client authorization phase assigns a set of client access privileges to the first connection;
- performing a user authentication phase, wherein the user authentication phase determines whether the user is allowed to access the server;
- performing a user authorization phase, by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the first connection with the set of user access privileges;
- receiving a request to establish a second connection between the client and the server;
- performing a second client authentication phase, wherein the second client authentication phase determines whether the client is allowed to connect to the server;
- and
- assigning the set of user access privileges to the second connection.
An apparatus for establishing multiple connections between a client and a network access server, the apparatus comprising:
- means for receiving a request to establish a first connection between the client and the server;
- means for performing a first client authentication phase, wherein the first client authentication phase determines whether the client is allowed to connect to the server;
- means for performing a client authorization phase, wherein the client authorization phase assigns a set of client access privileges to the first connection;
- means for performing a user authentication phase, wherein the user authentication phase determines whether the user is allowed to access the server;
- means for performing a user authorization phase, by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the first connection with the set of user access privileges;
- means for receiving a request to establish a second connection between the client and the server;
- means for performing a second client authentication phase, wherein the second client authentication phase determines whether the client is allowed to connect to the server;
- and
- means for assigning the set of user access privileges to the second connection.
A computer apparatus comprising:
- a processor;
- and
- a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing multiple connections between a client and a network access server, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of:
- receiving a request to establish a first connection between the client and the server;
- performing a first client authentication phase, wherein the first client authentication phase determines whether the client is allowed to connect to the server;
- performing a client authorization phase, wherein the client authorization phase assigns a set of client access privileges to the first connection;
- performing a user authentication phase, wherein the user authentication phase determines whether the user is allowed to access the server;
- performing a user authorization phase, by
- determining a set of user access privileges based on user access information;
- and
- replacing a set of client access privileges assigned to the first connection with the set of user access privileges;
- receiving a request to establish a second connection between the client and the server;
- performing a second client authentication phase, wherein the second client authentication phase determines whether the client is allowed to connect to the server;
- and
- assigning the set of user access privileges to the second connection.
Dependencies are inferred from the claim text.