A METHOD AND SYSTEM FOR AUTHENTICATING SERVERS IN A SERVER FARM

• US 20060236385A1
• Filed: 01/14/2005
• Published: 10/19/2006
• Est. Priority Date: 01/14/2005
• Status: Abandoned Application

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Otway, David John, Innes, Andrew, Mayers, Chris, Syms, Mark James
• Application Number:
  US10/905,654
• Publication Number:
  US 20060236385A1
• Time in Patent Office: Days
• US Class Current: 726/10
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A method and system for authenticating a server in a server farm. A first server in the server farm derives a Kerberos service ticket and a Kerberos authenticator responsive to information associated with the server farm. The server transmits the Kerberos service ticket and the Kerberos authenticator to a second server in the server farm. The second server authenticates the first server, responsive to the received Kerberos service ticket and the Kerberos authenticator.

Claims

1. A method for authenticating a first server in a server farm to a second server in the server farm, the method comprising the steps of:

deriving, by a first server, a Kerberos service ticket and a Kerberos authenticator responsive to information associated with the server farm;

transmitting, by the first server, the Kerberos service ticket and the Kerberos authenticator to a second server; and

authenticating, by the second server, the first server responsive to the received Kerberos service ticket and the Kerberos authenticator.

2. The method of claim 1, wherein step (b) further comprises transmitting the Kerberos service ticket and the Kerberos authenticator over Secure Sockets Layer/Transport Layer Security (SSL/TLS).

3. The method of claim 2, wherein step (b) further comprises using Kerberos to transmit the Kerberos service ticket and the Kerberos authenticator over Secure Sockets Layer/Transport Layer Security (SSL/TLS).

4. The method of claim 1, wherein step (b) further comprises transmitting the Kerberos service ticket and the Kerberos authenticator using Generic Security Services Application Program Interface (GSSAPI).

5. The method of claim 4, wherein step (b) further comprises using Kerberos to transmit the Kerberos service ticket and the Kerberos authenticator over Generic Security Services Application Program Interface (GSSAPI).

6. A system comprising:

a first server in a server farm deriving a Kerberos service ticket and a Kerberos authenticator responsive to information associated with the server farm; and

a second server in the server farm receiving the Kerberos service ticket and the Kerberos authenticator and authenticating the first server, responsive to the received Kerberos service ticket and the Kerberos authenticator.

7. The system of claim 6 wherein the first server derives the Kerberos service ticket responsive to an identity of a server in the server farm.

8. The system of claim 6 wherein the first server derives the Kerberos service ticket responsive to a name of a server in the server farm.

9. The system of claim 6 wherein the first server derives the Kerberos service ticket responsive to a secret associated with the server farm.

10. The system of claim 6 wherein the first server further comprises a ticket generator.

11. The system of claim 10 wherein the ticket generator further comprises an integrated circuit.

12. The system of claim 6 wherein the first server further comprises a hardware accelerator.

13. The system of claim 6 wherein the second server further comprises a ticket authenticator.