PROXY AUTHENTICATION SERVER

• US 20090113537A1
• Filed: 10/30/2007
• Published: 04/30/2009
• Est. Priority Date: 10/30/2007
• Status: Abandoned Application

• Current Assignee: Ricoh Company Limited
• Original Assignee: Ricoh Company Limited
• Inventors: WOO, JAMES
• Application Number:
  US11/929,704
• Publication Number:
  US 20090113537A1
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

Techniques and systems for allowing a client to interact with a Microsoft Windows Server via a proxy authentication server are disclosed. Instead of engaging in the NTLM authentication protocol with a Microsoft Windows Server directly, a client may interact with a proxy authentication server. The proxy authentication server may perform all of the necessary NTLM interactions with the Microsoft Windows Server. Thus, the proxy authentication server authenticates itself with the Microsoft Windows Server, and acts as the client'"'"'s agent. Because the client does not directly interact with the Microsoft Windows Server, the client does not need to authenticate itself with the Microsoft Windows Server; instead, after the proxy authentication server authenticates itself with the Microsoft Windows Server, the client can transact the client'"'"'s business with the Microsoft Windows Server through the authenticated proxy authentication server. The proxy authentication server can act on behalf of multiple different clients in a network.

Claims

1. A computer-implemented method for authenticating a client, the method comprising:

receiving, from a client, at a proxy authentication server, a digital certificate request; and

in response to receiving the digital certificate request, the proxy authentication server engaging in an authentication process with a particular server on which a certificate authority resides, thereby sparing the client from participating in the authentication process with the particular server.

2. The method of claim 1, wherein the step of receiving the digital certificate request from the client comprises receiving a digital certificate request that the client sent through a port other than a standard port on which digital certificate requests are normally sent.

3. The method of claim 1, wherein the step of engaging in the authentication process with the particular server comprises engaging in an NTLM authentication process with a Microsoft Windows Server.

4. The method of claim 1, further comprising:

the proxy authentication server authenticating the proxy authentication server with the particular server through the authentication process;

the proxy authentication server sending the digital certificate request to the certificate authority after authenticating the proxy authentication server with the particular server;

the proxy authentication server receiving a digital certificate from the certificate authority in response to the certificate authority'"'"'s receipt of the digital certificate request; and

the proxy authentication server sending the digital certificate to the client.

5. The method of claim 1, wherein the client is incapable of participating in the authentication process with the particular server.

6. The method of claim 1, further comprising:

the proxy server establishing a SSH channel with the client;

wherein the step of receiving the digital certificate request from the client comprises receiving the digital certificate request through the SSH channel.

7. A computer-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

receiving, from a client, at a proxy authentication server, a digital certificate request; and

in response to receiving the digital certificate request, the proxy authentication server engaging in an authentication process with a particular server on which a certificate authority resides, thereby sparing the client from participating in the authentication process with the particular server.

8. The computer-readable medium of claim 7, wherein the step of receiving the digital certificate request from the client comprises receiving a digital certificate request that the client sent through a port other than a standard port on which digital certificate requests are normally sent.

9. The computer-readable medium of claim 7, wherein the step of engaging in the authentication process with the particular server comprises engaging in an NTLM authentication process with a Microsoft Windows Server.

10. The computer-readable medium of claim 7, wherein the steps further comprise:

the proxy authentication server authenticating the proxy authentication server with the particular server through the authentication process;

the proxy authentication server sending the digital certificate request to the certificate authority after authenticating the proxy authentication server with the particular server;

the proxy authentication server receiving a digital certificate from the certificate authority in response to the certificate authority'"'"'s receipt of the digital certificate request; and

the proxy authentication server sending the digital certificate to the client.

11. The computer-readable medium of claim 7, wherein the client is incapable of participating in the authentication process with the particular server.

12. The computer-readable medium of claim 7, wherein the steps further comprise:

the proxy server establishing a SSH channel with the client;

wherein the step of receiving the digital certificate request from the client comprises receiving the digital certificate request through the SSH channel.

13. A proxy authentication server that is configured to:

receive, from a client, a digital certificate request; and

engage in an authentication process with a particular server on which a certificate authority resides in response to receiving the digital certificate request, thereby sparing the client from participating in the authentication process with the particular server.

14. The proxy authentication server of claim 13, further configured to receive the digital certificate request that the client sent through a port other than a standard port on which digital certificate requests are normally sent.

15. The proxy authentication server of claim 13, further configured to engage in an NTLM authentication process with a Microsoft Windows Server.

16. The proxy authentication server of claim 13, further configured to:

authenticate the proxy authentication server with the particular server through the authentication process;

send the digital certificate request to the certificate authority after authenticating the proxy authentication server with the particular server;

receive a digital certificate from the certificate authority in response to the certificate authority'"'"'s receipt of the digital certificate request; and

send the digital certificate to the client.

17. The proxy authentication server of claim 13, further configured to:

establish a SSH channel with the client; and

receive the digital certificate request through the SSH channel.