Client aware authentication in a wireless portal system

• US 20030033524A1
• Filed: 08/13/2001
• Published: 02/13/2003
• Est. Priority Date: 08/13/2001
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: York, William, Tran, Luu, Keshava, Bina
• Application Number:
  US09/929,476
• Publication Number:
  US 20030033524A1
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks

Abstract

A wireless portal system having a wireless server with a client aware authentication system. The client aware authentication system includes logic for automatically identifying client wireless devices connecting to the wireless server by using particular characteristics of the client in granting service connection requests from the client to the server. Depending on the client type, one or more, client-specific authentication modules are selected for the Client. In this way, the invention provides dynamic selection of authentication modules based on the Client type of an identified client. In one embodiment of the invention, the client aware authentication system includes extensible modular authentication parameters that allows the client to add-on client information characteristics which are not already pre-stored in the wireless server.

Claims

1. A client aware authentication system in a wireless network, comprising:

a wireless server; and

a plurality of classes of wireless clients, each of said classes of wireless clients having unique authentication parameters.

2. The client aware authentication system of claim 1, comprises a plurality of authentication modules coupled to an authentication service and wherein said authentication service is for dynamically selecting an authentication service module based on the class of a client.

3. The client aware authentication system of claim 2, wherein said authentication service receives and parses client type information of the wireless clients to determine the authentication characteristics of the wireless clients.

4. The client aware authentication system of claim 3, wherein the plurality of authentication modules comprises a set of predefined authentication parameters used by the wireless server to authenticate the wireless clients with known authentication characteristics accessing the wireless server.

5. The client aware authentication system of claim 4, wherein the authentication module further comprises authentication parameters dynamically extracted from client type information of the wireless clients accessing the wireless server.

6. The client aware authentication system of claim 5, wherein the authentication module selectively provides client specific authentication information to authenticate the wireless clients accessing the wireless server.

7. A wireless server system, comprising:

a plurality of authentication modules each providing respective authentication parameters pertinent to a type of client; and

an authentication service, in response to receiving a particular client type associated with a particular wireless device, for dynamically selecting an authentication module of said plurality of authentication modules based on said particular client type,

wherein said authentication service is also for applying a selected authentication module to said particular wireless device for the authentication thereof.

8. A wireless server system of claim 7, further comprising an automatic client detection service for automatically detecting said particular client type in response to service requests that originate from said particular wireless device.

9. The wireless server system of claim 8, wherein said service requests comprise header information which is used to detect said particular client type.

10. The wireless server system of claim 9, wherein said header information comprises hyper text transport protocol request headers.

11. The wireless server system of claim 10, wherein said header information comprises programmable user specific headers.

12. The wireless server system of claim 11, wherein said header information comprises client equipment manufacturer specified headers.

13. The wireless server system of claim 8, wherein said plurality of authentication modules comprise:

a user identification module;

a password module;

a membership module;

a securID module;

a safeword modules;

a S/key module;

a Microsoft Windows/NT module; and

a nopassword module.

14. The wireless server system of claim 13, wherein said plurality of authentication modules further comprise:

an LDAP authentication module;

a radius authentication module; and

a UNIX authentication module.

15. A wireless server, comprising:

a client aware authentication service logic;

a plurality of client aware authentication modules;

a client data storage module for storing client type information; and

a session service module for storing transient session information for a client requesting authentication to said wireless server.

16. The wireless server of claim 15, wherein the authentication service logic authenticates clients attempting to access the wireless server.

17. The wireless server system of claim 16, wherein the authentication service logic retrieves client type information from said client data storage and stores the client type value in the session service logic to enable the client to be authenticated by the wireless server.

18. The wireless server of claim 17, wherein the authentication modules comprise a set of predefined authentication parameters for authenticating known classes of wireless clients that access the wireless server.

19. The wireless server of claim 18, wherein the authentication modules comprise a set of dynamically extracted authentication parameters from service request headers from the wireless clients.

20. The wireless server of claim 19, wherein the authentication modules comprise selection logic to selectively choose authentication parameters in response to a client service request.

21. The wireless server of claim 20, wherein said client service request comprises hyper text transport protocol request headers.

22. The wireless server of claim 21, wherein said client service request comprises client equipment manufacturer specific headers.

23. The wireless server of claim 22, wherein the client service request includes programmable user specified headers.

24. A client aware authentication module, comprising

a plurality of client aware characteristics modules;

and

client aware authentication selection logic.

25. The client aware authentication module of claim 24, wherein said plurality of client aware characteristics modules comprise predefined set of client characteristics for authenticating known clients accessing the client aware authentication modules.

26. The client aware authentication module of claim 25, wherein said plurality of client aware characteristics modules comprise client characteristics dynamically extracted from the clients run-time environment.