Information security – Access control or authentication
Reexamination Certificate
2006-12-18
2011-10-04
Srivastava, Vivek (Department: 2433)
Information security
Access control or authentication
Reexamination Certificate
active
08032922
ABSTRACT:
One embodiment of the present invention provides a system that provides access to an application-resource. During operation, the system receives a request to access an application-resource associated with an application, wherein the request is received at an application-server that hosts the application. The system then determines an authentication-level required to access the application-resource. Next, the system sends the required authentication-level to an authentication-server. In response, the system receives an authentication-response from the authentication-server. Next, the system determines if the authentication-response specifies that the user is authenticated to access the application-resource. If so, the system grants the user access to the application-resource.One embodiment of the present invention provides a system that provides an authentication-token associated with a lower authentication-level in response to an authentication-token associated with a higher authentication-level expiring. Note that the lower authentication-level meets or exceeds a required authentication-level and does not require a user to re-authenticate.
REFERENCES:
patent: 7114076 (2006-09-01), Callaghan
patent: 7185364 (2007-02-01), Knouse et al.
patent: 7243369 (2007-07-01), Bhat et al.
patent: 7353281 (2008-04-01), New et al.
patent: 7673135 (2010-03-01), Chin et al.
patent: 2005/0193211 (2005-09-01), Kurose
Vasanta et al. , A User—Centric Anonymous Authorisation Framework in E-commerce Environment, May 2004, ACM.
Bhatia Gaurav
Biswas Kamalendu
Wilson David
Ambaye Samuel
Oracle International Corporation
Park Vaughan Fleming & Dowler LLP
Srivastava Vivek
Yao Shun
LandOfFree
Method and apparatus for providing access to an... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Method and apparatus for providing access to an..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method and apparatus for providing access to an... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-4257520