Single sign-on identity and access management and user authentication method and apparatus

• US 20060059546A1
• Filed: 09/01/2005
• Published: 03/16/2006
• Est. Priority Date: 09/01/2004
• Status: Abandoned Application

• Current Assignee: Icrew Security LLC
• Original Assignee: Icrew Security LLC
• Inventors: Nester, David, Markle, David Wayne, Cyr, Jeffrey Scott
• Application Number:
  US11/218,115
• Publication Number:
  US 20060059546A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A single sign-on authentication and access management apparatus and method is provided for computer networked digital content providers interconnected in a communication network. A single application service provider coupled to the application servers and a user computer includes an entitlements database interfaced with an authorization server for storing data utilized by the authorization server to responding to user requests to grant or deny access to user requested content.

Claims

1. A sign-on identity, access and authentication apparatus comprising:

at least one computer operated by a user;

a plurality of application servers for executing applications in response to access granted to a request generated by the user;

a communication link for interconnecting the computer operated by the user and one application server;

a single application service provider coupled to each of the application servers and to the user computer by the communication link for performing authorization processing; and

the application service provider including an entitlements database interfaced with an authorization server for storing data utilized by the authorization server for responding to user requests to one of granting or denying access to the requested application to the user.

2. A method of controlling access and security for a plurality of discrete application servers coupled by a computer network comprises the steps of:

providing an application service provider coupled via the computer network with the plurality of application servers and at least one user;

providing an authorization server in the application service provider interfaced with an entitlements database for storing data utilized by the authorization server for responding to a request generated by the user to one of granting or denying a request for execution of an application by the user; and

providing by the application service provider single sign on authentication of a user upon each request for access to an application in one of the application servers.