Method, system, and program product for connecting a client to a network

• US 20060248578A1
• Filed: 04/28/2005
• Published: 11/02/2006
• Est. Priority Date: 04/28/2005
• Status: Abandoned Application

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Denton, Guy S.
• Application Number:
  US11/119,436
• Publication Number:
  US 20060248578A1
• Time in Patent Office: Days
• US Class Current: 726/5
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Under the present invention, both user credentials and software credentials are authenticated before the connection is permitted. To this extent, one or more user credentials are received on the client (e.g., from a user). Thereafter, a software agent, typically running on the client, will determine whether one or more software modules identified in a list of required software modules have been installed on the client. For each software module installed on the client, the agent will generate a software credential. The user credential(s) and the software credential(s) will then be sent to the server, which will allow the connection if the user credential(s) are valid, and a valid software credential is provided for each software module identified in the list of required software modules.

Claims

1. A method for connecting a client to a network, comprising:

receiving one or more user credentials on the client;

determining with a software agent whether one or more software modules identified in a list of required software modules have been installed on the client;

generating a software credential for each of the one or more software modules determined to be installed on the client;

sending the one or more user credentials and the one or more software credentials to a server; and

connecting the client to the network if the one or more user credentials are valid, and a valid software credential is provided for each software module identified in the list of required software modules.

2. The method of claim 1, further comprising providing the software agent to the client.

3. The method of claim 1, further comprising identifying, with the software agent, any software modules in the list of required software modules that are missing from the client.

4. The method of claim 1, wherein the list of required software modules comprises at least one required software module selected from the group consisting of a particular operating system, a particular operating system level, particular antivirus software, a particular antivirus software level, a particular application, a particular application level, a particular security patch, a particular security patch level, particular spyware software, a particular spyware software level, particular adware software and a particular adware software level.

5. The method of claim 1, wherein the list of required software modules is stored on the server and is accessible to the agent.

6. The method of claim 1, further comprising authenticating the one or more user credentials and the one or more software credentials on the server to determine their validity, prior to the connecting step.

7. The method of claim 6, wherein the server is a Lightweight Directory Access Protocol (LDAP) server.

8. A system for connecting a client to a network, comprising:

a system for receiving one or more user credentials on the client;

a system for determining whether one or more software modules identified in a list of required software modules have been installed on the client;

a system for generating a software credential for each of the one or more software modules determined to be installed on the client; and

a system for sending the one or more user credentials and the one or more software credentials to a server, wherein the client is connected to the network if the one or more user credentials are valid, and a valid software credential is provided for each software module identified in the list of required software modules.

9. The system of claim 8, wherein the system comprises a software agent.

10. The system of claim 9, wherein the software agent is loaded on the client.

11. The system of claim 8, further comprising a system for identifying any software modules in the list of required software modules that are missing from the client.

12. The system of claim 8, wherein the list of required software modules comprises at least one required software module selected from the group consisting of a particular operating system, a particular operating system level, particular antivirus software, a particular antivirus software level, a particular application, a particular application level, a particular security patch, a particular security patch level, particular spyware software, a particular spyware software level, particular adware software and a particular adware software level.

13. The system of claim 8, wherein the list of required software modules is stored on the server and is accessible to the client.

14. The system of claim 8, further comprising:

a system for authenticating the one or more user credentials; and

a system for authenticating the one or more software credentials.

15. The system of claim 14, wherein the server is a Lightweight Directory Access Protocol (LDAP) server.

16. A program product stored on a computer readable medium for connecting a client to a network, the computer readable medium comprising program code for performing the following steps:

receiving one or more user credentials on the client;

determining whether one or more software modules identified in a list of required software modules have been installed on the client;

generating a software credential for each of the one or more software modules determined to be installed on the client; and

sending the one or more user credentials and the one or more software credentials to a server, wherein the client is connected to the network if the one or more user credentials are valid, and a valid software credential is provided for each software module identified in the list of required software modules.

17. The program product of claim 16, wherein the program product comprises software agent.

18. The program product of claim 17, wherein the software agent is loaded on the client.

19. The program product of claim 16, wherein the computer readable medium further comprises program code for performing the following step:

identifying any software modules in the list of required software modules that are missing from the client.

20. The program product of claim 16, wherein the list of required software modules comprises at least one required software module selected from the group consisting of a particular operating system, a particular operating system level, particular antivirus software, a particular antivirus software level, a particular application, a particular application level, a particular security patch, a particular security patch level, particular spyware software, a particular spyware software level, particular adware software and a particular adware software level.

21. The program product of claim 16, wherein the list of required software modules is stored on the server and is accessible to the client.

22. The program product of claim 16, wherein the server is a Lightweight Directory Access Protocol (LDAP) server.

23. A method for deploying an application for connecting a client to a network, comprising:

providing a computer infrastructure being operable to;

receive a user credential and a security credential for each of one or more software modules determined to be loaded on the client;

authenticate the user credential and the one or more security credentials to determine their validity; and

permit the connection to the network if the user credential is valid and if a valid software credential has been provided for each software module identified in a list of required software modules.