# US 8,789,152 B2 · Method for managing authentication procedures for a user > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 8,789,152 B2 - Document ID: US8789152B2 - Status: Granted - Kind: B2 - Application number: 12/949,832 - Filed: 2010-11-19 - Published: 2011-06-16 - Granted: 2014-07-22 - Earliest claimed: 2009-12-11 - Assignees: International Business Machines Corporation - Applicants: Thomas H. Gnech; Rainer Himmelsbach; Oliver Petrik; Heike Schmidt - Inventors: Thomas H. Gnech; Rainer Himmelsbach; Oliver Petrik; Heike Schmidt - Web page: https://patentgrep.com/patent/US8789152B2 ## CPC - G06F 21/31: User authentication - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - H04L 9/3226: {using a predetermined code, e.g. password, passphrase or PIN (network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A method and technique for managing authentication procedures for a user having access to several applications within a computing environment includes registering at an authentication manager different applications to which a user shall be given an authentication access by defining at the authentication manager a specific address identification allowing addressing the application specific authentication rules, logging the user to the authentication manager, the user requesting access to an application accessible by the authentication manager, and using the application specific address identification stored at the authentication manager to retrieve the application specific authentication rules for authenticating the user to the requested application. ## Claims ### Claim 1 A method for managing authentication procedures for a user having access to several applications within a computing environment, the method comprising: registering at an authentication manager different applications to which the user shall be given an authentication access by defining at the authentication manager a specific address identification allowing addressing the application specific authentication rules; logging the user to the authentication manager, the user requesting access to an application accessible by the authentication manager; determining whether the requested access to the application is an initial access to the application by the user; responsive to determining that the requested access to the application is an initial access to the application by the user, logging on to the application using a user credential assigned to the user by the application; responsive to successfully authenticating the user credential to the application, using the application specific address identification stored at the authentication manager to retrieve the application specific authentication rules for authenticating the user to the requested application, the application specific authentication rules defining how an authentication credential is to be created for authenticating the user to the application, and wherein the authentication manager is operable to create the authentication credential while the application is inactive; generating a valid authentication according to the application specific authentication rules stored at the authentication manager by considering an existing authentication history, when an authentication at a remote application is considered outdated; updating a remote application with the generated valid authentication; and storing the generated valid authentication at the authentication manager. ### Claim 2 (depends on 1) The method according to claim 1, wherein the application specific authentication rules comprise at least credential rules. ### Claim 3 (depends on 1) The method according to claim 1, further comprising, when registering the application to the authentication manager, downloading the application specific authentication rules to be stored together with corresponding specific address identification. ### Claim 4 (depends on 1) The method according to claim 1, further comprising online accessing the application specific authentication rules using specific address identification when authenticating the user to the requested application. ### Claim 5 (depends on 3) The method according to claim 3, further comprising using a Graphical User Interface managing online accessing the application specific authentication rules. ### Claim 6 (depends on 1) The method according to claim 1, further comprising verifying a given authentication against the application specific authentication rules stored at the authentication manager. ### Claim 7 A program product comprising a computer useable storage medium including a computer readable program, wherein the computer readable program when executed on a computer causes the computer to perform the method of: registering at an authentication manager different applications to which a user shall be given an authentication access by defining at the authentication manager a specific address identification allowing addressing the application specific authentication rules; logging the user to the authentication manager, the user requesting access to an application accessible by the authentication manager; determining whether the requested access to the application is an initial access to the application by the user; responsive to determining that the requested access to the application is an initial access to the application by the user, logging on to the application using a user credential assigned to the user by the application; responsive to successfully authenticating the user credential to the application, using the application specific address identification stored at the authentication manager to retrieve the application specific authentication rules for authenticating the user to the requested application, the application specific authentication rules defining how an authentication credential is to be created for authenticating the user to the application; creating the authentication credential while the application is inactive; generating a valid authentication according to the application specific authentication rules stored at the authentication manager by considering an existing authentication history, when an authentication at a remote application is considered outdated; updating a remote application with the generated valid authentication; and storing the generated valid authentication at the authentication manager. ### Claim 8 A data processing system comprising: a data processor; and program code executable by the data processor to perform a method comprising: registering at an authentication manager different applications to which a user shall be given an authentication access by defining at the authentication manager a specific address identification allowing addressing the application specific authentication rules; logging the user to the authentication manager, the user requesting access to an application accessible by the authentication manager; determining whether the requested access to the application is an initial access to the application by the user; responsive to determining that the requested access to the application is an initial access to the application by the user, logging on to the application using a user credential assigned to the user by the application; responsive to successfully authenticating the user credential to the application, using the application specific address identification stored at the authentication manager to retrieve the application specific authentication rules for authenticating the user to the requested application, the application specific authentication rules defining how an authentication credential is to be created for authenticating the user to the application; creating the authentication credential while the application is inactive; generating a valid authentication according to the application specific authentication rules stored at the authentication manager by considering an existing authentication history, when an authentication at a remote application is considered outdated; updating a remote application with the generated valid authentication; and storing the generated valid authentication at the authentication manager. ### Claim 9 (depends on 1) The method according to claim 1, further comprising retrieving the application specific authentication rules including definitions for a quantity of characters for the credential and a history of credentials for the application. ### Claim 10 (depends on 7) The program product according to claim 7, wherein the computer readable program when executed on the computer causes the computer to perform the method of retrieving the application specific authentication rules including definitions for a quantity of characters for the credential and a history of credentials for the application. ### Claim 11 (depends on 8) The system according to claim 8, wherein the program code is executable by the processor to perform the method comprising retrieving the application specific authentication rules including definitions for a quantity of characters for the credential and a history of credentials for the application. ### Claim 12 A method for managing authentication procedures for a user having access to an application within a computing environment, the method comprising: registering at an authentication manager an application to which the user shall be given an authentication access by defining at the authentication manager a specific address identification allowing addressing application specific authentication rules for the application; logging the user to the authentication manager, the user requesting access to the application accessible by the authentication manager; determining whether the requested access to the application is an initial access to the application by the user; responsive to determining that the requested access to the application is an initial access to the application by the user, logging on to the application using a user credential assigned to the user by the application; responsive to successfully authenticating the user credential to the application, using the application specific address identification stored at the authentication manager to retrieve the application specific authentication rules for authenticating the user to the application, the application specific authentication rules defining how an authentication credential is to be created for authenticating the user to the application, and wherein the authentication manager is operable to create the authentication credential while the application is inactive; generating, by the authentication manager, the authentication credential for the application according to the application specific authentication rules stored at the authentication manager; updating the application with the generated authentication credential; storing the generated authentication credential at the authentication manager; and responsive to the generated authentication credential being considered outdated by the application, generating a new authentication credential by the authentication manager by considering an existing authentication history of the user to the application.