Methods, systems and computer program products for single sign on authentication

• US 20070245411A1
• Filed: 12/22/2005
• Published: 10/18/2007
• Est. Priority Date: 09/15/2005
• Status: Abandoned Application

• Current Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Original Assignee: Bellsouth Intellectual Property Corporation (AT&T, Inc.)
• Inventors: Newton, Gregory
• Application Number:
  US11/316,426
• Publication Number:
  US 20070245411A1
• Time in Patent Office: Days
• US Class Current: 726/8
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

Systems for providing secure exchange of authentication and authorization information between a communications device and a backend device and/or application are provided. A forwarding device is positioned between the communications device and the backend device and/or application. The forwarding device is configured to forward information from the communications device to the backend device and/or application. A conversion module is coupled to the forwarding device and is configured to modify the information such that the modified information can be forwarded from the communications device to the backend device and/or application without provision of sign on information by a user. Related methods and computer program products are also provided.

Claims

1. A system for providing secure exchange of authentication and authorization information between a communications device and a backend device and/or application, comprising:

a forwarding device positioned between the communications device and the backend device and/or application, the forwarding device being configured to forward information from the communications device to the backend device and/or application; and

a conversion module coupled to the forwarding device and configured to modify the information such that the modified information can be forwarded from the communications device to the backend device and/or application without provision of sign on information by a user.

2. The system of claim 1, wherein the backend device and/or application comprises a router, a SIP registrar and/or SIP proxy server.

3. The system of claim 1, wherein the communications device comprises a softphone and/or a SIP phone.

4. The system of claim 1, wherein the conversion module is further configured to authenticate and authorize the information without provision of sign on information by the user based on security assertion markup language (SAML) information provided with the information.

5. The system of claim 1, further comprising two or more devices coupled to the forwarding device and configured to communicate with each other, the two or more devices being configured to communicate with each other without provision of sign on information provided by the user.

6. The system of claim 5, wherein the two or more devices are configured to communicate with each other without provision of sign on information using security assertion markup language (SAML) information provided with the information.

7. A computer implemented method for providing secure exchange of authentication and authorization information between a communications device and a backend device and/or application in a system including a forwarding device positioned between the communications device and the backend device and/or application and a conversion module coupled to the forwarding device, the method comprising:

modifying information forwarded from the communications device to the forwarding device such that the modified information can be forwarded from the forwarding device to the backend device and/or application without provision of sign on information by a user.

8. The method of claim 7, wherein the backend device and/or application comprises a router, a SIP registrar and/or SIP proxy server.

9. The method of claim 7, wherein the communications device comprises a softphone and/or a SIP phone.

10. The method of claim 7, wherein modifying further comprises:

authenticating and authorizing the information, at the conversion module, without provision of sign on information by the user based on security assertion markup language (SAML) information provided with the information.

11. The method of claim 7, further comprising:

communicating information between two or more devices coupled to the forwarding device, the two or more devices being configured to communicate with each other without provision of sign on information provided by the user.

12. The method of claim 11, wherein communicating information comprises communicating information without provision of sign on information using security assertion markup language (SAML) information provided with the information.

13. A computer program product for providing secure exchange of authentication and authorization information between a communications device and a backend device and/or application in a system including a forwarding device positioned between the communications device and the backend device and/or application and a conversion module coupled to the forwarding device, the computer program product comprising:

computer readable storage medium having computer readable program code embodied in said medium, the computer readable program code comprising;

computer readable program code configured to modify information forwarded from the communications device to the forwarding device such that the modified information can be forwarded from the forwarding device to the backend device and/or application without provision of sign on information by a user.

14. The computer program product of claim 13, wherein the backend device and/or application comprises a router, a SIP registrar and/or SIP proxy server.

15. The computer program product of claim 13, wherein the communications device comprises a softphone and/or a SIP phone.

16. The computer program product of claim 13, wherein the computer readable program code configured to modify further comprises:

computer readable program code configured to authenticate and authorize the information, at the conversion module, without provision of sign on information by the user based on security assertion markup language (SAML) information provided with the information.

17. The computer program product of claim 13, further comprising:

computer readable program code configured to communicate information between two or more devices coupled to the forwarding device, the two or more devices being configured to communicate with each other without provision of sign on information provided by the user.

18. The computer program product of claim 17, wherein the computer readable program code configured to communicate information comprises computer readable program code configured to communicate information without provision of sign on information using security assertion markup language (SAML) information provided with the information.