专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US5774551A Pluggable account management interface with unified login and logout and multiple user authentication services 失效
标题翻译：可插拔帐户管理界面，具有统一的登录和注销功能以及多个用户认证服务
公开(公告)号：US5774551A
公开(公告)日：1998-06-30
申请号：US499487
申请日：1995-08-07
申请人： Tajen R. Wu , William A. Shannon , Paul Fronberg , Donald R. Stephenson , Vipin Samar
发明人： Tajen R. Wu , William A. Shannon , Paul Fronberg , Donald R. Stephenson , Vipin Samar
IPC分类号： G06F21/00 , H04L9/32
CPC分类号： G06F21/31 , G06F2211/007
摘要： A system and method provide transparent access from any system entry service to multiple account management services, and particularly to multiple authentication services on a computer system, supporting unified login and logout. Transparency between system entry services and account management services, including authentication, password, account, and session services, is provided by an application programming interface and a configuration file. The configuration file stores associations between system entry services, and selected account management services, and allows an individual system entry service to be associated with multiple different ones of a given type of account management service, such as authentication services. The application programming interface determines dynamically in response to a request by a system entry service for an account management operation, such as authentication of a user, which account management service is associated with the system entry service by reading the configuration file and queuing pathnames stored therein of the account management services associated with the system entry service currently connecting user to the system. The application programming interface then invokes the queued pathnames for the desired operation. Multiple login is provided by encrypting authentication tokens used by the authentication services associated with a given system entry service with a primary authentication token of one of the authentication services, and subsequently decrypting the encrypted tokens as needed to authenticate the user. With unified login, the user need only provide the primary authentication token. Unified logout is provided by locating and destroying credentials of the user created by the multiple authentication services in response to a request of the valid user to logout.
摘要翻译：系统和方法提供从任何系统入口服务到多个帐户管理服务的透明访问，特别是对计算机系统上的多个认证服务，支持统一登录和注销。系统入口服务和帐户管理服务之间的透明度，包括身份验证，密码，帐户和会话服务，由应用程序编程接口和配置文件提供。配置文件存储系统入口服务和所选帐户管理服务之间的关联，并且允许单个系统输入服务与给定类型的帐户管理服务（例如认证服务）中的多个不同的相关联。应用程序编程接口响应于系统入口服务对帐户管理操作的请求（例如用户的认证）动态地确定，该帐户管理服务通过读取配置文件和排队存储在其中的路径名而与系统入口服务相关联与当前将用户连接到系统的系统入口服务相关联的帐户管理服务。然后，应用程序编程接口调用所需操作的排队路径名。通过加密与给定系统输入服务相关联的认证服务使用的认证令牌与其中一个认证服务的主认证令牌来提供多个登录，并且随后根据需要解密加密令牌以认证用户。通过统一登录，用户只需要提供主认证令牌。通过查找和销毁由多个认证服务创建的用户的凭据来响应有效用户注销的请求来提供统一注销。

IPRDB

热门服务

关于我们

友情链接

联系方式