Back to results
US 7,127,607 B1Granted
PKI-based client/server authentication
AssigneeLANDesk Software Limited
InventorsJin Su, Paul Hillyard, Alan B. Butt
Life of this patent
Estimating the term…
Abstract
A client/server authentication system is disclosed. The system includes a filter, a plug-in, and an extension. The filter monitors sessions between a client and a server for proper authentication. The plug-in is coupled to the client and the server. The plug-in generates public and private key pairs, and receives and stores certificates. The extension is coupled to the filter. The extension generates script commands to cause the client and the server to perform required steps indicated by the filter.
Claims7
An authentication system, comprising:
- a security filter to monitor sessions between a client and a server for proper authentication, to search for a security token sent from the client to the server, wherein the security token, if present, is stored on the client as a cookie, and to direct the client to submit a certificate to the server;
- a plug-in coupled to the client and the server, said plug-in to generate public and private key pairs, and to receive and store certificates;
- and
- security extension coupled to said filter, said extension to verify the submitted certificate sent from the client to the server, to generate script commands to cause the client and the server to perform required operations indicated by said security filter, wherein the extension is configured to generate a node challenge random number;
- and
- to cause the client to generate a response to the node challenge random number, to send the response to the server, and to save the response as a named cookie on the client.
3 more elements
A secure client/server system, comprising:
- a client to request data or service;
- a server to provide the requested data or service;
- and
- an authentication system including:
- a security filter to monitor sessions between the client and the server for proper authentication, to search for a security token sent from the client to the server, wherein the security token, if present, is stored on the client as a cookie, and to direct the client to submit a certificate to the server,
- a plug-in coupled to the client and the server, said plug-in to generate public and private key pairs, and to receive and store certificates, and
- security extension coupled to said filter, said extension to verify the submitted certificates sent from the client to the server, to generate script commands to cause the client and the server to perform required steps indicated by said security filter, wherein the extension is configured to generate a node challenge random number, and
- to cause the client to generate a response to the node challenge random number, to send the response to the server, and to save the response as a named cookie on the client.
5 more elements
Dependencies are inferred from the claim text.