AU2010246354B1 - Back-end constrained delegation model - Google Patents

Back-end constrained delegation model Download PDF

Info

Publication number
AU2010246354B1
AU2010246354B1 AU2010246354A AU2010246354A AU2010246354B1 AU 2010246354 B1 AU2010246354 B1 AU 2010246354B1 AU 2010246354 A AU2010246354 A AU 2010246354A AU 2010246354 A AU2010246354 A AU 2010246354A AU 2010246354 B1 AU2010246354 B1 AU 2010246354B1
Authority
AU
Australia
Prior art keywords
computing device
back end
computer
domain
middle tier
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
AU2010246354A
Other languages
English (en)
Inventor
Alexandru Hanganu
Paul J. Leach
Paul J. Miller
Mark Fishel Novak
K. Michiko Short
Jeremy Dominic Viegas
Yi Zeng
Liqiang Zhu
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Microsoft Technology Licensing LLC
Original Assignee
Microsoft Technology Licensing LLC
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Microsoft Technology Licensing LLC filed Critical Microsoft Technology Licensing LLC
Priority to AU2010246354A priority Critical patent/AU2010246354B1/en
Priority to US12/965,445 priority patent/US9118672B2/en
Publication of AU2010246354B1 publication Critical patent/AU2010246354B1/en
Priority to AU2011332150A priority patent/AU2011332150B2/en
Priority to CA2815690A priority patent/CA2815690A1/en
Priority to RU2013123353/08A priority patent/RU2589333C2/ru
Priority to PCT/US2011/060614 priority patent/WO2012071207A2/en
Priority to EP11842889.5A priority patent/EP2643766B1/en
Priority to JP2013540969A priority patent/JP5865386B2/ja
Priority to KR1020137012975A priority patent/KR20140003426A/ko
Priority to BR112013012537A priority patent/BR112013012537A2/pt
Priority to CN201110373318.0A priority patent/CN102438014B/zh
Priority to HK12108787.6A priority patent/HK1168697B/xx
Assigned to MICROSOFT TECHNOLOGY LICENSING, LLC reassignment MICROSOFT TECHNOLOGY LICENSING, LLC Request for Assignment Assignors: MICROSOFT CORPORATION
Ceased legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F15/00—Digital computers in general; Data processing equipment in general
    • G06F15/16—Combinations of two or more digital computers each having at least an arithmetic unit, a program unit and a register, e.g. for a simultaneous processing of several programs
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/321—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority
    • H04L9/3213—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving a third party or a trusted authority using tickets or tokens, e.g. Kerberos
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0807—Network architectures or network communication protocols for network security for authentication of entities using tickets, e.g. Kerberos

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Computing Systems (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Computer And Data Communications (AREA)
  • Data Exchanges In Wide-Area Networks (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Information Transfer Between Computers (AREA)
AU2010246354A 2010-11-22 2010-11-22 Back-end constrained delegation model Ceased AU2010246354B1 (en)

Priority Applications (12)

Application Number Priority Date Filing Date Title
AU2010246354A AU2010246354B1 (en) 2010-11-22 2010-11-22 Back-end constrained delegation model
US12/965,445 US9118672B2 (en) 2010-11-22 2010-12-10 Back-end constrained delegation model
BR112013012537A BR112013012537A2 (pt) 2010-11-22 2011-11-14 método para possibilitar a delegação, meio legível por computador e sistema
EP11842889.5A EP2643766B1 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model
CA2815690A CA2815690A1 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model
RU2013123353/08A RU2589333C2 (ru) 2010-11-22 2011-11-14 Ограничиваемая удаленной частью модель делегирования
PCT/US2011/060614 WO2012071207A2 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model
AU2011332150A AU2011332150B2 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model
JP2013540969A JP5865386B2 (ja) 2010-11-22 2011-11-14 バックエンド制約委譲モデル
KR1020137012975A KR20140003426A (ko) 2010-11-22 2011-11-14 백-엔드 한정 위임 모델
CN201110373318.0A CN102438014B (zh) 2010-11-22 2011-11-22 后端受限委托模型
HK12108787.6A HK1168697B (en) 2010-11-22 2012-09-07 Back-end constrained delegation model

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
AU2010246354A AU2010246354B1 (en) 2010-11-22 2010-11-22 Back-end constrained delegation model

Publications (1)

Publication Number Publication Date
AU2010246354B1 true AU2010246354B1 (en) 2011-11-03

Family

ID=45465361

Family Applications (2)

Application Number Title Priority Date Filing Date
AU2010246354A Ceased AU2010246354B1 (en) 2010-11-22 2010-11-22 Back-end constrained delegation model
AU2011332150A Ceased AU2011332150B2 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model

Family Applications After (1)

Application Number Title Priority Date Filing Date
AU2011332150A Ceased AU2011332150B2 (en) 2010-11-22 2011-11-14 Back-end constrained delegation model

Country Status (9)

Country Link
US (1) US9118672B2 (enExample)
EP (1) EP2643766B1 (enExample)
JP (1) JP5865386B2 (enExample)
KR (1) KR20140003426A (enExample)
AU (2) AU2010246354B1 (enExample)
BR (1) BR112013012537A2 (enExample)
CA (1) CA2815690A1 (enExample)
RU (1) RU2589333C2 (enExample)
WO (1) WO2012071207A2 (enExample)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US9148285B2 (en) 2013-01-21 2015-09-29 International Business Machines Corporation Controlling exposure of sensitive data and operation using process bound security tokens in cloud computing environment
GB2512062A (en) 2013-03-18 2014-09-24 Ibm A method for secure user authentication in a dynamic network
US8745394B1 (en) 2013-08-22 2014-06-03 Citibank, N.A. Methods and systems for secure electronic communication
US11770377B1 (en) * 2020-06-29 2023-09-26 Cyral Inc. Non-in line data monitoring and security services
US12470536B2 (en) * 2023-04-04 2025-11-11 Dell Products L.P. Inter-domain access using identity provider

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070073877A1 (en) * 2005-08-25 2007-03-29 Boykin James R Method and system for unified support of multiple system management information models in a multiple host environment
US20070107048A1 (en) * 2005-10-11 2007-05-10 David Halls Systems and Methods for Facilitating Distributed Authentication
WO2007139944A2 (en) * 2006-05-26 2007-12-06 Microsoft Corporation Policy driven, credential delegation for single sign on and secure access to network resources
WO2008031043A1 (en) * 2006-09-08 2008-03-13 Microsoft Corporation Controlling the delegation of rights

Family Cites Families (27)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6367009B1 (en) 1998-12-17 2002-04-02 International Business Machines Corporation Extending SSL to a multi-tier environment using delegation of authentication and authority
US7698381B2 (en) 2001-06-20 2010-04-13 Microsoft Corporation Methods and systems for controlling the scope of delegation of authentication credentials
US7185359B2 (en) 2001-12-21 2007-02-27 Microsoft Corporation Authentication and authorization across autonomous network systems
US7401235B2 (en) * 2002-05-10 2008-07-15 Microsoft Corporation Persistent authorization context based on external authentication
US20040073668A1 (en) 2002-10-10 2004-04-15 Shivaram Bhat Policy delegation for access control
GB2394388B (en) * 2002-10-14 2005-10-19 Toshiba Res Europ Ltd Methods and systems for flexible delegation
JP2004272380A (ja) * 2003-03-05 2004-09-30 Nippon Telegr & Teleph Corp <Ntt> グループ認証方法及びシステム、サービス提供装置、認証装置、サービス提供プログラム及びそれを記録した記録媒体、認証プログラム及びそれを記録した記録媒体
US7644275B2 (en) * 2003-04-15 2010-01-05 Microsoft Corporation Pass-thru for client authentication
US7546640B2 (en) 2003-12-10 2009-06-09 International Business Machines Corporation Fine-grained authorization by authorization table associated with a resource
US7555569B1 (en) * 2004-02-02 2009-06-30 Emc Corporation Quick configuration status
US7805527B2 (en) 2005-06-29 2010-09-28 Microsoft Corporation Using a variable identity pipe for constrained delegation and connection pooling
US7984493B2 (en) * 2005-07-22 2011-07-19 Alcatel-Lucent DNS based enforcement for confinement and detection of network malicious activities
US20090119504A1 (en) 2005-08-10 2009-05-07 Riverbed Technology, Inc. Intercepting and split-terminating authenticated communication connections
US8200971B2 (en) 2005-09-23 2012-06-12 Cisco Technology, Inc. Method for the provision of a network service
US8381306B2 (en) 2006-05-30 2013-02-19 Microsoft Corporation Translating role-based access control policy to resource authorization policy
US20070294404A1 (en) 2006-06-15 2007-12-20 International Business Machines Corporation Method and system for authorization and access control delegation in an on demand grid environment
JP4882546B2 (ja) * 2006-06-28 2012-02-22 富士ゼロックス株式会社 情報処理システムおよび制御プログラム
US20080066147A1 (en) 2006-09-11 2008-03-13 Microsoft Corporation Composable Security Policies
JP2008071226A (ja) * 2006-09-15 2008-03-27 Nec Corp クレデンシャルコンバージョンシステムと方法、コンピュータ装置、及びプログラム
US7853987B2 (en) 2006-10-10 2010-12-14 Honeywell International Inc. Policy language and state machine model for dynamic authorization in physical access control
JP4314267B2 (ja) * 2006-11-30 2009-08-12 キヤノン株式会社 アクセス制御装置およびアクセス制御方法及び印刷システム
US8190755B1 (en) * 2006-12-27 2012-05-29 Symantec Corporation Method and apparatus for host authentication in a network implementing network access control
CN101262342A (zh) 2007-03-05 2008-09-10 松下电器产业株式会社 分布式授权与验证方法、装置及系统
US8386776B2 (en) * 2007-09-25 2013-02-26 Nec Corporation Certificate generating/distributing system, certificate generating/distributing method and certificate generating/distributing program
US20090158407A1 (en) * 2007-12-13 2009-06-18 Fiberlink Communications Corporation Api translation for network access control (nac) agent
US8166516B2 (en) 2008-03-27 2012-04-24 Microsoft Corporation Determining effective policy
US8364970B2 (en) * 2009-02-18 2013-01-29 Nokia Corporation Method and apparatus for providing enhanced service authorization

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070073877A1 (en) * 2005-08-25 2007-03-29 Boykin James R Method and system for unified support of multiple system management information models in a multiple host environment
US20070107048A1 (en) * 2005-10-11 2007-05-10 David Halls Systems and Methods for Facilitating Distributed Authentication
WO2007139944A2 (en) * 2006-05-26 2007-12-06 Microsoft Corporation Policy driven, credential delegation for single sign on and secure access to network resources
WO2008031043A1 (en) * 2006-09-08 2008-03-13 Microsoft Corporation Controlling the delegation of rights

Also Published As

Publication number Publication date
WO2012071207A3 (en) 2012-07-19
EP2643766A2 (en) 2013-10-02
AU2011332150B2 (en) 2015-04-30
RU2589333C2 (ru) 2016-07-10
US9118672B2 (en) 2015-08-25
KR20140003426A (ko) 2014-01-09
JP5865386B2 (ja) 2016-02-17
AU2011332150A1 (en) 2013-05-02
EP2643766B1 (en) 2019-07-31
WO2012071207A2 (en) 2012-05-31
BR112013012537A2 (pt) 2016-09-06
HK1168697A1 (zh) 2013-01-04
EP2643766A4 (en) 2017-08-09
CA2815690A1 (en) 2012-05-31
JP2014511511A (ja) 2014-05-15
RU2013123353A (ru) 2014-11-27
US20120131661A1 (en) 2012-05-24

Similar Documents

Publication Publication Date Title
US10609039B2 (en) Traitor tracing for obfuscated credentials
US9055052B2 (en) Method and system for improving storage security in a cloud computing environment
CN102685089B (zh) 用于企业应用的可信设备声明的方法和客户机设备
US7085925B2 (en) Trust ratings in group credentials
US9553858B2 (en) Hardware-based credential distribution
US20120130874A1 (en) Providing security in a cloud storage environment
US11418499B2 (en) Password security
EP3570517B1 (en) Authentication technique making use of emergency credential
US11444936B2 (en) Managing security credentials
EP2008219A2 (en) Accessing data storage devices
AU2011332150B2 (en) Back-end constrained delegation model
US9425966B1 (en) Security mechanism evaluation service
US20090204544A1 (en) Activation by trust delegation
US20060248578A1 (en) Method, system, and program product for connecting a client to a network
CN102438014B (zh) 后端受限委托模型
Erikson Frameworks for centralized authentication and authorization
EP4172835A1 (en) User device configuration
HK1168697B (en) Back-end constrained delegation model
Fugkeaw et al. Adding SAML to two-factor authentication and single sign-on model for dynamic access control
Foltz et al. Enterprise Security with Endpoint Agents
Fugkeaw et al. A-COLD: access control of web OLAP over multi-data warehouse
Doukas et al. Certification and Security Issues in Biomedical Grid Portals

Legal Events

Date Code Title Description
FGA Letters patent sealed or granted (standard patent)
PC Assignment registered

Owner name: MICROSOFT TECHNOLOGY LICENSING, LLC

Free format text: FORMER OWNER WAS: MICROSOFT CORPORATION

MK14 Patent ceased section 143(a) (annual fees not paid) or expired