Method and system for authentication in a computer network

• US 20060020793A1
• Filed: 02/28/2005
• Published: 01/26/2006
• Est. Priority Date: 05/19/2004
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Betts, Christopher, Rogers, Tony
• Granted Patent: US 9,088,561 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key

Abstract

Method and system for authentication in a computer network is provided. A first message from a client to a server is transmitted, where the first message includes erroneous user information. In response to the first message, a second message is transmitted from the server to the client, where the second message includes an error message and a nonce. The client transmits a third message to the server in response to the second message, where the third message includes non-erroneous user information and the nonce. The server then provides authentication in response to the client'"'"'s third message.

Claims

1. A method for authentication in a computer network, comprising:

transmitting a first message from a client to a server, the first message comprising at least one of erroneous and incomplete user information;

transmitting a second message from the server to the client in response to the first message, the second message comprising an error message and a nonce;

transmitting a third message from the client to the server in response to the second message, the third message comprising non-erroneous and complete user information and the nonce; and

transmitting authentication information from the server to the client in response to the third message.

2. The method of claim 1, wherein the at least one of erroneous and incomplete user information comprises user information with at least one missing parameter.

3. The method of claim 1, wherein the computer network is a Universal Discovery, Description and Integration (UDDI) network, comprising a UDDI client and a UDDI server.

4. The method of claim 1, wherein the third message includes the nonce which has been signed using a PKI private key.

5. The method of claim 1, wherein the authentication comprises an authentication token.

6. A system for authentication in a computer network, comprising:

a system for transmitting a first message from a client to a server, the first message comprising at least one of erroneous and incomplete user information;

a system for transmitting a second message from the server to the client in response to the first message, the second message comprising an error message and a nonce;

a system for transmitting a third message from the client to the server in response to the second message, the third message comprising non-erroneous and complete user information and the nonce; and

a system for transmitting authentication information from the server to the client in response to the third message.

7. The system of claim 6, wherein the at least one of erroneous and incomplete user information comprises user information with at least one missing parameter.

8. The system of claim 6, wherein the computer network is a Universal Discovery, Description and Integration (UDDI) network, comprising a UDDI client and a UDDI server.

9. The system of claim 6, wherein the third message includes the nonce which is signed using a PKI private key.

10. The system of claim 6, wherein the authentication comprises an authentication token.

11. A computer readable storage medium including computer executable code for authentication in a computer network, comprising:

code for transmitting a first message from a client to a server, the first message comprising at least one of erroneous and incomplete user information;

code for transmitting a second message from the server to the client in response to the first message, the second message comprising an error message and a nonce;

code for transmitting a third message from the client to the server in response to the second message, the third message comprising non-erroneous and complete user information and the nonce; and

code for providing authentication in response to the third message.

12. The computer readable storage medium of claim 11, wherein the at least one of erroneous and incomplete user information comprises user information with at least one missing parameter.

13. The computer readable storage medium of claim 11, wherein the computer network is a Universal Discovery, Description and Integration (UDDI) network, comprising a UDDI client and a UDDI server.

14. The computer readable storage medium of claim 11, wherein the third message includes the nonce which is signed using a PKI private key.

15. The computer readable storage medium of claim 11, wherein the authentication comprises an authentication token.