US 8,621,584 B2 · Credential provider that encapsulates other credential providers

Abstract

Systems, methods, and computer readable media for encapsulating multiple Windows® based credential providers (CPs) within a single wrapping CP are described. In general, CP credentials and fields from two or more encapsulated or wrapped CPs may be enumerated and aggregated in such a way that the order of fields from each CP is preserved, fields that may be used only once are identified and appear only once, and fields are given a new unique field identifier. The union of all such fields (minus duplicates of any one-use-only fields) may be used to generate a mapping so that the wrapping CP and CP credential may “pass-through” calls from the operating system's logon interface to the correct wrapped CP and CP credential. The disclosed techniques may be used, for example, to provide single sign-on functionality where a plurality of sign-on credentials may be used (e.g., user name/password and smart card PIN).

Claims23

Dependent claims

A non-transitory program storage device comprising instructions stored thereon for causing a programmable control device to:

create a wrapper credential provider for a plurality of original credential providers, wherein each original credential provider has a specified number of credentials, an ordered list of fields wherein each field has an original credential provider specific identifier and each field has a descriptor;
assign a unique provider index to each of the plurality of original credential providers;
generate a map list from the ordered lists of fields from each original credential provider, wherein the order of fields from a single original credential provider is preserved in the map list;
identify one-use-only fields in the map list;
assign a unique identifier to a first instance of each one-use-only field in the map list;
assign each subsequent instance of a one-use-only field in the map list the same unique identifier as was assigned to a first instance of the one-use-only field in the map list;
and
assign a unique identifier to each non-one-use-only field in the map list.

5 more elements

A method for controlling a computer logon environment comprising:

creating, using a processor, a wrapper credential provider for a plurality of original credential providers, wherein each original credential provider has a specified number of credentials, an ordered list of fields wherein each field has an original credential provider specific identifier and each field has a descriptor;
assigning, using the processor, a unique provider index to each of the plurality of original credential providers;
generating, using the processor, a map list from the ordered lists of fields from each original credential provider, wherein the order of fields from a single original credential provider is preserved in the map list;
identifying, using the processor, one-use-only fields in the map list;
assigning, using the processor, a unique identifier to a first instance of each one-use-only field in the map list;
assigning, using the processor, each subsequent instance of a one-use-only field in the map list the same unique identifier as was assigned to a first instance of the one-use-only field in the map list;
and
assigning, using the processor, a unique identifier to each non-one-use-only field in the map list.

5 more elements

Dependencies are inferred from the claim text.

Credential provider that encapsulates other credential providers

Life of this patent

Credential provider that encapsulates other credential providers

Life of this patent

Abstract

Claims23