Loading patent…
AssigneeUnisys Corporation
InventorsMartin Lee Schanze, Mark Lynn Preston, Roger Andrew Jones, Poornima Manjunath
Estimating the term…
A method and system is provided wherein a multiple number of non-preauthenticated clients and non-preauthenticated principals are seeking to logon into a Kerberos domain. Normally, such logon operations would be held-up and stopped until any one single client or principal had completed his logon authorization. However, the present system uses an asynchronous message mechanism by which any single non-preauthenticated client or non-preauthenticated principal can complete his initial logon operation without having to wait for another's authenticating logon operation to be completed. A series of asynchronous message mechanisms are provided in which any single client or principal can complete and finalize the authentication of his logon without having to wait for the completion of other requesting clients and principals seeking to logon and be authenticated.
A system for enabling asynchronous authentication of a non-preauthenticated client-User means in a Kerberos domain servicing multiple requesting non-preauthenticated clients while eliminating any delays due to multiple concurrent authentication requests, said system comprising:
A secure message transmission system in a Kerberos environment which permits a client-user to operate in a network for authentication request transmittal and message response without suspending client service when a Kerberos Server (20) has not yet responded to an earlier request for an authentication message code signal, said system comprising:
A method for asynchronous authentication of a non-preauthenticated originating terminal in a Kerberos domain, said authentication occurring without delay due to other concurrent requests for authentication by other terminals such as client-Users and principals, said method comprising the steps of:
In a network wherein multiple client-terminals communicate with a specialized multi-processor, multi-platform client-server means (13), having a Kerberos Support Library (34), and communicating with a communications means (MARC 40, COMS 42), a General Security Service Library (38) and said specialized multi-processor, multi-platform client-server means for accessing response information from a Kerberos server (20), a method for enabling a requesting client-terminal to receive an authentication response message asynchronously from said Kerberos Server (20) comprising the steps of:
Dependencies are inferred from the claim text.