Method and appliance for authenticating, by an appliance, a client to access a virtual private network connection, based on an attribute of a client-side certificate
AssigneeCitrix Systems, Inc.
InventorsAmarnath Mullick, Shashi Nanjundaswamy, Ajay Soni
Life of this patent
Estimating the term…
Abstract
In a method and appliance for authenticating, by an appliance, a client to access a virtual network connection, based on an attribute of a client-side certificate, a client authentication certificate is requested from a client. A value of at least one field in the client authentication certificate received from the client is identified. One of a plurality of types of access is assigned responsive to an application of a policy to the identified value of the at least one field, each of the plurality of access types associated with at least one connection characteristic.
Claims20
A method for assigning a type of access based on content of a client authentication certificate, the method comprising:
- (a) transmitting, by a device intermediary to a client and a server and responsive to the client's request to access a predetermined application, a request to the client for a client authentication certificate;
- (b) receiving, by the device responsive to the request of the device, the client authentication certificate from the client;
- (c) identifying, by the device, a first value of a first field identifying a user name and a second value of a second field identifying a group, from content within the client authentication certificate received from the client;
- and
- (d) assigning, by the device, a type of access of a plurality of different types of access responsive to applying an authorization policy to the first value comprising the user name and the second value comprising the group.
A system for assigning a type of access based on content of a client authentication certificate, the system comprising:
- a hardware-based device intermediary to a client and a server, the device configured to request from the client a client authentication certificate responsive to the client's request to access a predetermined application;
- wherein the device is configured to receive the client authentication certificate from the client responsive to the request and identify a first value of a first field identifying a user name and a second value of a second field identifying a group, from content within the client authentication certificate received from the client;
- and
- wherein the device is configured to assign a type of access of a plurality of different types of access responsive to applying an authorization policy to the first value comprising the user name and the second value comprising the group.
Dependencies are inferred from the claim text.