Method and apparatus for multiple token access to thin client architecture session

• US 20020169967A1
• Filed: 05/14/2001
• Published: 11/14/2002
• Est. Priority Date: 05/14/2001
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Vibhuti, Shivaputrappa S., Varma, Sangeeta
• Application Number:
  US09/858,017
• Publication Number:
  US 20020169967A1
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

Embodiments of the present invention are directed to a method and apparatus for multiple token access to thin client architecture session. In one embodiment, a user is associated with a session using an authenticated token. A user may access a session by authenticating the user'"'"'s identity. An authenticated token for the user is created and the user is granted access to the session. As a result, the user will be able to access the session without the physical token by authenticating the user'"'"'s identity using a passphrase or biometric identifier. In one embodiment, a user is able to access a session from one terminal when the session is already being accessed from another terminal. The user presents an authenticated token associated with the session, and the session is disconnected from the old terminal and input and output information is rerouted to the new terminal.

Claims

1. A method for accessing a session comprising:

associating a user with said session; and

presenting an authenticated token to access said session from a first terminal.

2. The method of claim 1 further comprising:

presenting said authenticated token to access said session from a second terminal.

3. The method of claim 2 further comprising:

sending a session disconnect signal to said first terminal; and

routing input and output for said session to said second terminal.

4. The method of claim 1 wherein said step of associating comprises:

authenticating an identity of said user.

5. The method of claim 4 wherein said step of authenticating comprises:

obtaining a physical token assigned to said user.

6. The method of claim 4 wherein said step of authenticating comprises:

obtaining a passphrase.

7. The method of claim 4 wherein said step of authenticating comprises:

obtaining a biometric identifier.

8. The method of claim 7 wherein said biometric identifier is a finger print pattern.

9. The method of claim 7 wherein said biometric identifier is a retinal image.

10. The method of claim 1 wherein said step of associating comprises:

converting an initial token to said authenticated token.

11. The method of claim 10 wherein said session is identified by said authenticated token.

13. The session accessing system of claim 12 further comprising:

a second presenting unit configured to present said authenticated token to access said session from a second terminal.

14. The session accessing system of claim 13 further comprising:

a messaging unit configured to send a session disconnect signal to said first terminal; and

a routing unit configured to route input and output for said session to said second terminal.

15. The session accessing system of claim 12 wherein said associating unit comprises:

an authentication unit configured to authenticate an identity of said user.

16. The session accessing system of claim 15 wherein said authentication unit comprises:

a user interface configured to obtain a physical token assigned to said user.

17. The session accessing system of claim 15 wherein said authentication unit comprises:

a user interface configured to obtain a passphrase.

18. The session accessing system of claim 15 wherein said step of authenticating comprises:

a user interface configured to obtain a biometric identifier.

19. The session accessing system of claim 18 wherein said biometric identifier is a finger print pattern.

20. The session accessing system of claim 18 wherein said biometric identifier is a retinal image.

21. The session accessing system of claim 12 wherein said associating unit comprises:

a conversion unit configured to convert an initial token to said authenticated token.

22. The session accessing system of claim 21 wherein said session is identified by said authenticated token.

24. The computer program product of claim 23 further comprising:

computer readable code configured to cause a computer to present said authenticated token to access said session from a second terminal.

25. The computer program product of claim 24 further comprising:

computer readable code configured to cause a computer to send a session disconnect signal to said first terminal; and

computer readable code configured to cause a computer to route input and output for said session to said second terminal.

26. The computer program product of claim 23 wherein said computer readable code configured to cause a computer to associate comprises:

computer readable code configured to cause a computer to authenticate an identity of said user.

27. The computer program product of claim 26 wherein said computer readable code configured to cause a computer to authenticate comprises:

computer readable code configured to cause a computer to obtain a physical token assigned to said user.

28. The computer program product of claim 26 wherein said computer readable code configured to cause a computer to authenticate comprises:

computer readable code configured to cause a computer to obtain a passphrase.

29. The computer program product of claim 26 wherein said computer readable code configured to cause a computer to authenticate comprises:

computer readable code configured to cause a computer to obtain a biometric identifier.

30. The computer program product of claim 29 wherein said biometric identifier is a finger print pattern.

31. The computer program product of claim 29 wherein said biometric identifier is a retinal image.

32. The computer program product of claim 23 wherein said computer readable code configured to cause a computer to associate comprises:

computer readable code configured to cause a computer to convert an initial token to said authenticated token.

33. The computer program product of claim 32 wherein said session is identified by said authenticated token.

12. A session accessing system comprising:

an associating unit configured to associate a user with a session; and

a first presenting unit configured to present said authenticated token to access said session from a first terminal.

23. A computer program product comprising:

a computer usable medium having computer readable program code embodied therein configured for accessing a session, comprising;

computer readable code configured to cause a computer to associate a user with said session; and

computer readable code configured to cause a computer to present said authenticated token to access said session from a first terminal.