System and method for automically authenticating a user in a distributed network system

Patent 5818936 Issued on October 6, 1998. Estimated Expiration Date:

March 15, 2016. Estimated Expiration Date is calculated based on simple USPTO term provisions. It does not account for terminal disclaimers, term adjustments, failure to pay maintenance fees, or other factors which might affect the term of a patent.

Abstract Claims Description Full Text

Patent References

X window security system
Patent #: 5073933
Issued on: 12/17/1991
Inventor: Rosenthal

Method and apparatus for authentication of client server communication
Patent #: 5349642
Issued on: 09/20/1994
Inventor: Kingdon

Authentication of users with dynamically configurable protocol stack
Patent #: 5594921
Issued on: 01/14/1997
Inventor: Pettus

Personal identification systems
Patent #: 5606614
Issued on: 02/25/1997
Inventor: Brady, et al.

Automatic cache bypass for instructions exhibiting poor cache hit ratio Patent #: 5625793
Issued on: 04/29/1997
Inventor: Mirza

Inventor

Mashayekhi, Cameron

Assignee

Novell, Inc.

Application

No. 617940 filed on 03/15/1996

US Classes:

713/167, Object protection713/152Application layer security

Examiners

Primary: Buczinski, Stephen C.

Attorney, Agent or Firm

Cesari and McKenna, LLP

International Classes

H04K 001/00
G06F 012/14

Abstract

A distributed authentication service that automates an authentication exchange between a user and an application program of a distributed network system. The novel distributed authentication service comprises an exchange controller coupled to an authentication database containing a group of encrypted application secrets associated with the user. Each application secret is, in turn, associated with a particular program resident in the system. According to the present invention, the controller cooperates with the database to automate the exchange procedure by (i) receiving an authentication inquiry generated by the particular program in response to the user's request to access that program and (ii) providing that program with the proper application secret retrieved from the database. The group of encrypted application secrets associated with the user is referred to as a "keychain." Each keychain is assigned a public/private key pair, with all secrets in the keychain being encrypted with the public key. The user may be associated with one or more keychains, each of which may be further associated with different secrets. Since these secrets correspond to application programs, the association of programs to keychains may be based upon various characteristics, such as the user's rights with respect to the programs. Furthermore, each application program may be accessible by the same or different users so that, e.g., those users having the same access rights for a program may utilize the same keychain containing each user's secrets for the programs.