Systems and methods for credentialing of non-local requestors in decoupled systems utilizing a domain local authenticator

• US 10,021,084 B2
• Filed: 10/21/2015
• Issued: 07/10/2018
• Est. Priority Date: 10/28/2014
• Status: Active Grant

• Current Assignee: Ip Ot Sub Ulc
• Original Assignee: Open Text Sa Ulc (Open Text Corporation)
• Inventors: Matthews, Glen, Carroll, Jonathan, Dajani, Aladin
• Primary Examiner(s): Vaughan, Michael R
• Application Number:
  US14/918,705
• Publication Number:
  US 20160119306A1
• Time in Patent Office: 993 Days
• Field of Search: None
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

Embodiments as disclosed provide systems and methods that use a local authenticator within a domain to provide a credential to access a resource of the domain to a non-local requestor. When a request is received from a non-local requestor at the domain the non-local requestor can be authenticated based on the request. The local authenticator can then be accessed to obtain a credential. This credential may be the same type of credential provided to members of the domain when they authenticate using the local authenticator. The credential is provided to the non-local requestor so the non-local requestor can access the resource of the domain using the credential and authentication of the non-local requestor with respect to these accesses can be accomplished using the local domain authenticator and the credential.

Claims

1. A system, comprising:

a domain comprising a data center including an managed file transfer (MFT) Instance, including;

a processor coupled to a memory;

a set of resources including a managed file transfer service for transferring files between a set of servers by;

receiving a file transfer request from a sender to send a file to a recipient;

determining a location of the recipient;

determining a location server that is closest to the location of the recipient;

and

automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;

a local domain authenticator for;

providing a credential for a member of the domain to use in accessing the set of resources of the domain during a session;

authenticating the credential associated with a member of the domain, and a remote authenticator which is part of a cloud based MFT system, for;

providing the credential to a non-local requestor which is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and is not a member of the domain by;

receiving an authentication request from the non-local requestor outside the domain, wherein the request is to be authenticated for accessing the set of resources;

authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;

accessing the local domain authenticator to obtain the credential associated with the domain; and

providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator and the credential.

2. The system of claim 1, wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.

3. The system of claim 1, wherein authenticating a non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.

4. The system of claim 3, wherein authenticating a non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.

5. The system of claim 4, wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.

6. The system of claim 1, wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.

7. The system of claim 6, wherein the authentication server uses OpenText Directory Services (OTDS).

8. A method, comprising:

receiving, at a remote authenticator in a domain with a set of resources, an authentication request from a non-local requestor which is not a member of the domain, wherein the request is to be authenticated for accessing the set of resources, the domain comprises a data center including a managed file transfer (MFT) Instance, the remote authenticator is part of a cloud based MFT system, the non-local requestor is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and wherein the set of resources includes a managed file transfer service for transferring files between a set of servers by;

receiving a file transfer request from a sender to send a file to a recipient, determining a location of the recipient, determining a location server that is closest to the location of the recipient, and automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;

authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;

accessing a local domain authenticator to obtain a credential, wherein the credential is for a member of the domain to use in accessing the set of resources of the domain during a session; and

providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator to authenticate the credential.

9. The method of claim 8, wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.

10. The method of claim 8, wherein authenticating the non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.

11. The method of claim 10, wherein authenticating the non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.

12. The method of claim 11, wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.

13. The method of claim 8, wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.

14. The method of claim 13, wherein the authentication server uses OpenText Directory Services (OTDS).