WO1999066384A3 - Method and apparatus for authenticated secure access to computer networks - Google Patents

Method and apparatus for authenticated secure access to computer networks Download PDF

Info

Publication number
WO1999066384A3
WO1999066384A3 PCT/US1999/013701 US9913701W WO9966384A3 WO 1999066384 A3 WO1999066384 A3 WO 1999066384A3 US 9913701 W US9913701 W US 9913701W WO 9966384 A3 WO9966384 A3 WO 9966384A3
Authority
WO
WIPO (PCT)
Prior art keywords
intranet
access
computer networks
secure access
reverse proxy
Prior art date
Application number
PCT/US1999/013701
Other languages
French (fr)
Other versions
WO1999066384A2 (en
WO1999066384A9 (en
Inventor
Stephen Uhler
Original Assignee
Sun Microsystems Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Sun Microsystems Inc filed Critical Sun Microsystems Inc
Priority to AU48244/99A priority Critical patent/AU4824499A/en
Publication of WO1999066384A2 publication Critical patent/WO1999066384A2/en
Publication of WO1999066384A3 publication Critical patent/WO1999066384A3/en
Publication of WO1999066384A9 publication Critical patent/WO1999066384A9/en

Links

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Theoretical Computer Science (AREA)
  • General Engineering & Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computing Systems (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)

Abstract

Embodiments of the invention comprise a method and apparatus for authenticating secure access to computer networks. Embodiments of the invention control and manage access to a computer intranet from an extranet. Access to the intranet is allowed such that specified packets are permitted to penetrate the intranet's gateway and transmitted to a reverse proxy. The reverse proxy configurations authenticate a user, provide logging (e.g., intranet access), forward user credentials to intranet applications and provide a mapping between external references to intranet resources and their internal references. Mappings can be expressed literally or as a pattern expression.
PCT/US1999/013701 1998-06-17 1999-06-16 Method and apparatus for authenticated secure access to computer networks WO1999066384A2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
AU48244/99A AU4824499A (en) 1998-06-17 1999-06-16 Method and apparatus for authenticated secure access to computer networks

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US9889298A 1998-06-17 1998-06-17
US09/098,892 1998-06-17

Publications (3)

Publication Number Publication Date
WO1999066384A2 WO1999066384A2 (en) 1999-12-23
WO1999066384A3 true WO1999066384A3 (en) 2000-07-06
WO1999066384A9 WO1999066384A9 (en) 2000-08-10

Family

ID=22271433

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US1999/013701 WO1999066384A2 (en) 1998-06-17 1999-06-16 Method and apparatus for authenticated secure access to computer networks

Country Status (2)

Country Link
AU (1) AU4824499A (en)
WO (1) WO1999066384A2 (en)

Families Citing this family (23)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6324648B1 (en) * 1999-12-14 2001-11-27 Gte Service Corporation Secure gateway having user identification and password authentication
JP2001229130A (en) * 1999-12-31 2001-08-24 Ge Medical Technology Services Inc Method and device for secure remote access to software of center service facility
US6584454B1 (en) * 1999-12-31 2003-06-24 Ge Medical Technology Services, Inc. Method and apparatus for community management in remote system servicing
WO2001065806A2 (en) * 2000-03-01 2001-09-07 Sun Microsystems, Inc. System and method for avoiding re-routing in a computer network during secure remote access
US7257836B1 (en) 2000-04-24 2007-08-14 Microsoft Corporation Security link management in dynamic networks
JP2002055948A (en) * 2000-08-11 2002-02-20 Nifty Corp Computer system, member information transmitting method, and personal information acquiring method
DE10107883B4 (en) * 2001-02-19 2006-02-09 Deutsche Post Ag Method for transmitting data, proxy server and data transmission system
US7146403B2 (en) 2001-11-02 2006-12-05 Juniper Networks, Inc. Dual authentication of a requestor using a mail server and an authentication server
EP1777912B1 (en) * 2001-11-02 2018-08-15 Juniper Networks, Inc. Method and system for providing secure access to resources on private networks
US7281139B2 (en) * 2002-07-11 2007-10-09 Sun Microsystems, Inc. Authenticating legacy service via web technology
US7610617B2 (en) 2003-12-23 2009-10-27 Wells Fargo Bank, N.A. Authentication system for networked computer applications
US7970788B2 (en) 2005-08-02 2011-06-28 International Business Machines Corporation Selective local database access restriction
US7933923B2 (en) 2005-11-04 2011-04-26 International Business Machines Corporation Tracking and reconciling database commands
DE102006012167B4 (en) * 2006-03-13 2008-02-21 Mainpean Gmbh Method and computer system for providing a service offered via a digital information network
US8141100B2 (en) 2006-12-20 2012-03-20 International Business Machines Corporation Identifying attribute propagation for multi-tier processing
US8495367B2 (en) 2007-02-22 2013-07-23 International Business Machines Corporation Nondestructive interception of secure data in transit
US8261326B2 (en) 2008-04-25 2012-09-04 International Business Machines Corporation Network intrusion blocking security overlay
US8910255B2 (en) 2008-05-27 2014-12-09 Microsoft Corporation Authentication for distributed secure content management system
US20110231479A1 (en) * 2010-03-22 2011-09-22 Siemens Product Lifecycle Management Software Inc. System and Method for Secure Multi-Client Communication Service
GB2498566A (en) * 2012-01-20 2013-07-24 Dolphin Speed Networks Ltd Authenticating a user at a proxy using cookies
WO2013177687A1 (en) 2012-05-31 2013-12-05 Netsweeper Inc. Policy service authorization and authentication
JP7018255B2 (en) * 2016-04-19 2022-02-10 株式会社三菱Ｕｆｊ銀行 Authentication management device and program
CN106209815A (en) * 2016-07-04 2016-12-07 安徽天达网络科技有限公司 A kind of Multi net voting connects authentication method

Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0825748A2 (en) * 1996-07-15 1998-02-25 AT&T Corp. A method and apparatus for restricting access to private information in domain name systems by redirecting query requests
WO1998031124A1 (en) * 1997-01-10 1998-07-16 Hanson Gordon L Reverse proxy server

Patent Citations (2)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP0825748A2 (en) * 1996-07-15 1998-02-25 AT&T Corp. A method and apparatus for restricting access to private information in domain name systems by redirecting query requests
WO1998031124A1 (en) * 1997-01-10 1998-07-16 Hanson Gordon L Reverse proxy server

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
ABADI M ET AL: "Secure Web tunneling", COMPUTER NETWORKS AND ISDN SYSTEMS,NL,NORTH HOLLAND PUBLISHING. AMSTERDAM, vol. 30, no. 1-7, 1 April 1998 (1998-04-01), pages 531 - 539, XP004121395, ISSN: 0169-7552 *

Also Published As

Publication number Publication date
WO1999066384A2 (en) 1999-12-23
WO1999066384A9 (en) 2000-08-10
AU4824499A (en) 2000-01-05

Similar Documents

Publication Publication Date Title
WO1999066384A3 (en) Method and apparatus for authenticated secure access to computer networks
DE60043053D1 (en) SELF-GENERATION OF CERTIFICATES USING A SAFE MICROPROCESSOR IN A DIGITAL DATA TRANSMISSION DEVICE
CA2327078A1 (en) Secure session management and authentication for web sites
RU2439692C2 (en) Policy-controlled delegation of account data for single registration in network and secured access to network resources
EP0998091A3 (en) System and method for web server user authentication
EP1494420A3 (en) Reducing network configuration complexity with transparent virtual private networks
EP1089516A3 (en) Method and system for single sign-on user access to multiple web servers
WO2003038578A8 (en) User access control to distributed resources on a data communications network
WO1999013448A3 (en) Remote access-controlled communication
WO2001045049A8 (en) Secure gateway having user identification and password authentication
WO2000076120A3 (en) Security architecture
MY145724A (en) Persistent authorization context based on external authentication
WO2004079497A3 (en) Using tcp to authenticate ip source addresses
EP1271882A3 (en) Methods and systems for controlling the scope of delegation of authentication credentials
WO2002033887A3 (en) Multiple authentication sessions for content protection
WO2005057827A3 (en) 802.1x authentication technique for share media
DE60233288D1 (en) Computer network security system with a portable storage device
WO2001047232A3 (en) Secure enrollment of a device with a clearinghouse server for internet telephony system
EP2264956A3 (en) Method for securing remote access to private networks
WO2003032603A3 (en) Ip hopping for secure data transfer
KR20060060717A (en) Preventing unauthorized access of computer network resources
CA2205637A1 (en) Encryption apparatus
WO2000036807A3 (en) Encrypted virtual private network for accessing remote sensors
WO2002015512A3 (en) A method and an apparatus for granting use of a session of a packet data transmission standard designated by an identifier
Cisco Chapter 6, FTP Commands

Legal Events

Date Code Title Description
AK Designated states

Kind code of ref document: A2

Designated state(s): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A2

Designated state(s): GH GM KE LS MW SD SL SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

121 Ep: the epo has been informed by wipo that ep was designated in this application
DFPE Request for preliminary examination filed prior to expiration of 19th month from priority date (pct application filed before 20040101)
AK Designated states

Kind code of ref document: A3

Designated state(s): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: A3

Designated state(s): GH GM KE LS MW SD SL SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

AK Designated states

Kind code of ref document: C2

Designated state(s): AE AL AM AT AU AZ BA BB BG BR BY CA CH CN CU CZ DE DK EE ES FI GB GD GE GH GM HR HU ID IL IN IS JP KE KG KP KR KZ LC LK LR LS LT LU LV MD MG MK MN MW MX NO NZ PL PT RO RU SD SE SG SI SK SL TJ TM TR TT UA UG UZ VN YU ZA ZW

AL Designated countries for regional patents

Kind code of ref document: C2

Designated state(s): GH GM KE LS MW SD SL SZ UG ZW AM AZ BY KG KZ MD RU TJ TM AT BE CH CY DE DK ES FI FR GB GR IE IT LU MC NL PT SE BF BJ CF CG CI CM GA GN GW ML MR NE SN TD TG

COP Corrected version of pamphlet

Free format text: PAGES 1/11-11/11, DRAWINGS, REPLACED BY NEW PAGES 1/11-11/11; DUE TO LATE TRANSMITTAL BY THE RECEIVING OFFICE

REG Reference to national code

Ref country code: DE

Ref legal event code: 8642

122 Ep: pct application non-entry in european phase