Back to results
US 7,681,229 B1Granted
Proxy authentication
AssigneeNovell, Inc.
InventorsHashem Mohammad Ebrahimi, Mark D. Ackerman, Carolyn B. McClain
Life of this patent
Estimating the term…
Abstract
Techniques are provided for proxy authentication. A proxy includes a first port, a second port, and a secure port; each port processing a different service. Requests received on the first and second ports which require authentication are redirected to the secure port. The secure port processes an authentication router service. The authentication router service forwards requests for authentication to selective authentication services. The authentication services authenticate the requests over the secure port.
Claims20
A method for proxy authentication implemented and executed on a proxy device for performing the method, comprising:
- receiving, at the proxy device, a first authentication request on a first port of a proxy;
- forwarding, by the proxy device, the first authentication request to a first authentication service for processing;
- receiving, by the proxy device, a second authentication request on the first port of the proxy;
- and
- forwarding, by the proxy device, the second authentication request to a second authentication service for processing, wherein the first and second authentication services are different from one another and the first and second authentication requests are received over the first port of the proxy and the first authentication service is a Lightweight Directory Access Protocol (LDAP) authentication service, and wherein disparate authentication techniques are routed to the first and second authentication services when the corresponding authentication requests are both received over and processed from a single port of the proxy, which is the first port of the proxy, and wherein interactions with the first and the second authentication services occur over the single port of the proxy.
2 more elements
A method for proxy authentication implemented and executed on a proxy device for performing the method, comprising:
- configuring, by the proxy device, a first port of a proxy as a transparent proxy service;
- configuring, by the proxy device, a second port of the proxy as a forward proxy service;
- configuring, by the proxy device, a third port of the proxy as an authentication router service, wherein the authentication router service routes authentication requests received from the first and the second ports to selective authentication services in accordance with parameter information placed on the requests by the transparent and forward proxy services in response to types associated with the requests and requesters making the requests, and wherein interactions with the selective authentication services occur over the third port, and wherein a client associated with the authentication requests is unaware of the transparent proxy service but is aware of and configured to directly interact with the forward proxy service, wherein the client is configured to direct its traffic a second port identifier that identifies the second port that is the forward proxy service, and wherein some of the authentication services are different from one another and at least one of the authentication services is a Lightweight Directory_ Access Protocol (LDAP) authentication service;
- and
- processing, by the proxy device, the transparent proxy service, the forward proxy service, and the authentication router service on their respective ports of the proxy, and wherein when at least one authentication for at least one authentication service occurs an assertion is embodied in a particular local environment of a particular client to indicate successful authentication.
2 more elements
A proxy authentication system, comprising:
- a first port having a first proxy service;
- a second port having a second proxy service;
- and
- a third port having an authentication router service, wherein initial requests received on the first and second port which require authentication are redirected to the authentication router service on the third port, the authentication router service routes the initial requests to authentication services which authenticate the initial requests for access to target services in accordance with parameter information placed on the requests by the first and second proxy services in response to types associated with the requests and requesters making the requests, and wherein interactions with the authentication services occur over the third port, and wherein some of the authentication services are different from one another and at least one of the authentication services is a Lightweight Directory Access Protocol (LDAP) authentication service, and wherein the second proxy service is a forward proxy service that a client is directly configured to interact with and is aware of and the client is configured to direct its traffic a second port identifier that identifies the second port that is the second proxy service, and wherein the first proxy service is a transparent proxy service the client is unaware of and indirectly interacts with.
1 more element
Dependencies are inferred from the claim text.