METHOD OF CONTROLLING ACCESS TO BUSINESS CLOUD SERVICE

• US 20170187705A1
• Filed: 04/06/2016
• Published: 06/29/2017
• Est. Priority Date: 12/24/2015
• Status: Abandoned Application

• Current Assignee: Somansa Co., Ltd.
• Original Assignee: Somansa Co., Ltd.
• Inventors: SHIM, Je Hyun, KIM, Tae Wan, PAEK, Seung Tae
• Application Number:
  US15/091,726
• Publication Number:
  US 20170187705A1
• Time in Patent Office: Days
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

Disclosed herein is a method of controlling access to a business cloud service. The method includes transmitting, as a service server receives a bushiness cloud service access request from a terminal of a service user, a single sign on (SSO) authentication request for integrated authentication of access of the service user to at least one business cloud service to an authentication server, requesting, as the authentication server receives the SSO authentication request, the terminal for authentication information of the service user and generating an authentication response by comparing the authentication information received from the terminal with prestored authentication information, and determining, by a reverse proxy server, a denial or permission of the access of the service user to the business cloud service by comparing context information extracted from the SSO authentication request and the authentication response with a preset policy.

Claims

1. A method of controlling access to a business cloud service, comprising:

transmitting, as a service server of a business cloud service provider receives a bushiness cloud service access request from a terminal of a service user, a single sign on (SSO) authentication request for integrated authentication of access of the service user to at least one business cloud service to an authentication server of an identification (ID) provider;

requesting, as the authentication server receives the SSO authentication request, the terminal for authentication information of the service user and generating an authentication response by comparing the authentication information received from the terminal with prestored authentication information; and

determining, by a reverse proxy server, a denial or permission of the access of the service user to the business cloud service by comparing context information extracted from the SSO authentication request and the authentication response with a preset policy.

2. The method of claim 1, wherein the SSO authentication request comprises an Internet protocol (IP) address of the terminal of the service user and information of a user agent installed in the terminal of the service user.

3. The method of claim 1, wherein the authentication response comprises a time when the SSO authentication request is issued, a title of an accessible business cloud service which the service user is able to access, identification of an account of the service user, and user attribute data.

4. The method of claim 1, wherein the preset policy comprises, for at least one user, a type of a business cloud service which a corresponding service user is able to access, a type of a business cloud service which the corresponding service user is unable to access, and a service access regulation which includes an accessible time of the business cloud service which the corresponding service user is able to access.

5. The method of claim 1, wherein the SSO authentication request and the authentication response are performed using security assertion markup language (SAML) standard.