SYSTEMS AND METHODS FOR A SECURITY DELEGATE MODULE TO SELECT APPROPRIATE SECURITY SERVICES FOR WEB APPLICATIONS

• US 20120311671A1
• Filed: 05/31/2011
• Published: 12/06/2012
• Est. Priority Date: 05/31/2011
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Wood, Thomas Alexander, Eckersberg, John J. II, Radez, Daniel P.
• Granted Patent: US 8,635,671 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

In accordance with some aspects of the present disclosure, a method is disclosed that can include receiving, by a security delegate module, a set of user authentication credentials by an application running a first instance in a network for a user; determining, by the security delegate module, a type of the application; and selecting, by the security delegate module, a security service based on the set of user authentication credentials and the type of application.

Claims

1. A method comprising:

receiving, by a security delegate module, a set of user authentication credentials by an application running a first instance in a network for a user;

determining, by the security delegate module, a type of the application; and

selecting, by the security delegate module, a security service based on the set of user authentication credentials and the type of application.

2. The method according to claim 1, further comprising authenticating, authorizing, or both, the user to use the application.

3. The method according to claim 1, wherein the security service is selected from the group consisting of Kerberos, NT Lan Manager (NTLM) authentication protocol, secure sockets layer/transport security layer (SSL/TSL), token authentication, virtual private network (VPN), remote access security (RAS), digest authentication, LDAP authentication and combinations thereof.

4. The method according to claim 1, wherein the selecting includes identifying an origin of the user authentication credentials.

5. The method according to claim 1, wherein the selecting includes identifying a type of user.

6. The method according to claim 5, wherein the type of user includes a user internal to the network or a user external to the network.

7. The method according to claim 1, wherein the user is associated with a security level for accessing the network or the application

8. The method according to claim 1, wherein the type of application is associated with a security level.

9. An apparatus comprising:

a security delegate module configured to receive a set of user authentication credentials by an application running a first instance in a network for a user and to select a security service for the set of user authentication credentials and the application.

10. The apparatus according to claim 9, wherein the security delegate module is configured to authenticate, authorize, or both, the user to use the application.

11. The apparatus according to claim 9, wherein the security service is selected from the group consisting of Kerberos, NT Lan Manager (NTLM) authentication protocol, secure sockets layer/transport security layer (SSL/TSL), token authentication, virtual private network (VPN), remote access security (RAS), digest authentication, LDAP authentication and combinations thereof.

12. The apparatus according to claim 9, wherein the security delegate module is configured to identify an origin of the user authentication credentials.

13. The apparatus according to claim 9, wherein the security delegate module is configured to identify a type of user.

14. The apparatus according to claim 13, wherein the type of user includes a user internal to the network or a user external to the network.

15. The apparatus according to claim 9, wherein the user is associated with a security level for accessing the network or the application.

16. The apparatus according to claim 9, wherein the security delegate module is configured to identify a type of application.

17. The apparatus according to claim 16, wherein the type of application is associated with a security level.

18. A system comprising:

a network, the network including a security delegate module configured to receive a set of user authentication credentials by an application running a first instance in a network for a user and to select a security service for the set of user authentication credentials and the application.