Methods, systems, and computer program products for providing authentication in a computer environment
AssigneeAT&T Intellectual Property I, L.P.
InventorsDavid Foster, Suriya Sena
Life of this patent
Estimating the term…
Abstract
Exemplary embodiments relate to methods, systems, and computer program products for providing authentication in a computer environment. The method includes receiving a request for a web service from a client. The request is received at a J2EE based application server hosting one or more applications. The request includes a Kerberos security token and a Kerberos service ticket. Each application has its own Kerberos identity. It is verified that the client has access to the web service using the Kerberos security token and Kerberos service ticket as input to the verifying. The client is provided a connection to the web service if the verifying results in a determination that the client has access to the web service.
Claims16
A method for providing authentication in a computer environment, the method comprising:
- receiving a request for a web service from a client, wherein the request is received at a J2EE based application server hosting one or more applications, the request includes a Kerberos security token and a Kerberos service ticket, and each application has its own Kerberos identity;
- verifying that the client has access to the web service using the Kerberos security token and Kerberos service ticket as input to the verifying;
- and
- providing the client a connection to the web service if the verifying results in a determination that the client has access to the web service;
- wherein the web service is hosted on a BEA WebLogic application server, the request is received at the BEA WebLogic application server;
- the BEA WebLogic application server detelmining if the request includes a generic security service (GSS) framed Kerberos application request in a simple object access protocol (SOAP) header;
- and
- wherein the BEA WebLogic application server returns a security exception if the Kerberos application request is not in the simple object access protocol (SOAP).
A host system in communication with a network, the host system comprising:
- a J2EE based application server hosting one or more applications and including an input for receiving a request for a web service from a client, wherein the request includes a Kerberos security token and a Kerberos service ticket, and each application has its own Kerberos identity;
- and
- computer instructions for:
- verifying that the client has access to the web service using the Kerberos security token and Kerberos service ticket as input to the verifying;
- and
- providing the client a connection to the web service if the verifying results in a determination that the client has access to the web service.
- wherein the application server is a BEA WebLogic application logic server:
- the BEA WebLogic application server determining if the request includes a generic security service (GSS) framed Kerberos application request in a simple object access protocol (SOAP) header;
- and
- wherein the BEA WebLogic application server returns a security exception if the Kerberos application request is not in the simple object access protocol (SOAP).
A computer program product for providing authentication in a computer environment, the computer program product comprising instructions embodied on a computer readable storage medium for execution by the processing circuit for facilitating a method comprising:
- receiving a request for a web service from a client, wherein the request is received at a J2EE based application server hosting one or more applications, the request includes a Kerberos security token and a Kerberos service ticket, and each application has its own Kerberos identity;
- verifying that the client has access to the web service using the Kerberos security token and Kerberos service ticket as input to the verifying;
- and
- providing the client a connection to the web service if the verifying results in a determination that the client has access to the web service;
Dependencies are inferred from the claim text.