Asynchronous message system for menu-assisted resource control program

• US 6,009,175 A
• Filed: 06/27/1997
• Issued: 12/28/1999
• Est. Priority Date: 06/27/1997
• Status: Expired due to Term

• Current Assignee: Unisys Corporation
• Original Assignee: Unisys Corporation
• Inventors: Schanze, Martin Lee
• Primary Examiner(s): Swann, Tod R.
• Assistant Examiner(s): CODDINGTON, TREVOR Q
• Application Number:
  US08/884,418
• Time in Patent Office: 914 Days
• Field of Search: 713/200, 713/201, 713/168, 380/21, 380/23
• US Class Current: 713/155
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066

Abstract

A plurality of client-terminals are connected to utilize the facilities of a client-server and a Kerberos Server in a Kerberos domain. A client-terminal requesting Kerberos service is facilitated by cooperating programs designated as the communications management system program (COMS) and the Menu Assisted Resource Control program (MARC) which enable access to a Kerberos Server for building a response message to said requesting client-terminal without disabling continued usage of said client-terminal.

Claims

1. In a network wherein multiple client-terminals communicate command requests to a client-server, having a Kerberos Server Library, and a Kerberos server, a method for enabling a requesting client terminal to receive an unsolicited response message asynchronously from a Kerberos Server, comprising the steps of:

(a) initiating a Kerberos command request by a requesting client-terminal;

(b) utilizing a communication management system program (COMS) and menu assisted resource control program (MARC) to communicate said command request to a Kerberos Server via said Kerberos Server Library;

(c) requesting, by said MARC program, of a dialog number;

(d) assigning, by said MARC program, of a Transaction ID word to identify the client-terminal'"'"'s original command request;

(e) terminating the session between said client-terminal and said Kerberos Server Library thus allowing the client-terminal to process other command requests;

(f) enabling receipt of an asynchronous response message by said client-terminal.

2. In a network wherein multiple client-terminals communicate with a client-server and a Kerberos server, a method for enabling a requesting client terminal to receive an unsolicited response message asynchronously from a Kerberos Server, comprising the steps of:

(a) initiating by a requesting client terminal of an original command request to said Kerberos server via said client-server;

(b) utilizing a communication management system program (COMS) to route said original command request to a menu assisted resource control program (MARC);

(c) setting up, by said MARC program of a request for Kerberos service to a Kerberos Server Library in said client-server and assigning a dialog number to said original client-terminal request;

(d) establishing a session, by said MARC program, between said Kerberos Server Library and said client-terminal;

(e) requesting, by said MARC program, of the said dialog number and assigning a Transaction_-- ID word for the said original command request of said client-terminal;

(f) releasing of the said session of step (d) thus permitting said client terminal to execute other requests;

(g) generating of an unsolicited message response by said Kerberos Server in cooperation with said Kerberos Server Library;

(h) passing said unsolicited message response to said MARC program;

(i) transferring said message response from said MARC program to said COMS program;

(j) receiving of said response message by said COMS program;

(k) delivering said response message to said requesting client-terminal via said COMS program.

3. The method of claim 2 wherein step (c) further includes the steps of:

(c1) receiving said original command request by said Kerberos Server Library (KSL);

(c2) determining, by said KSL, that the message response is to be returned asynchronously, and conveying this information to said MARC program;

(c3) building an information message by said KSL to indicate that a response message will be returned asynchronously;

(c4) requesting of said Kerberos Server, by said KSL, to return a formatted response message;

(c5) receiving by said KSL of said response message and then adding a header plus the Transaction_-- ID.

4. The method of claim 2 wherein step (i) includes the steps of:

(i1) checking by said MARC program to see that said dialog number is still active;

(i2) discarding said response message of said dialog number if said dialog number is no longer active.

5. A secure message transmission system in a Kerberos environment which permits a client user to operate in a network for command transmittal and message response without suspending client service when a Kerberos Server has not yet responded to an earlier request for an authentication message code signal, said system comprising:

(a) client terminal means (10) to indicate an original request for validation message code signal from a Kerberos Server (20);

(b) program means (MCS 41 and COMS

     42) for transmitting commands for service to a Kerberos Server Library and Kerberos Server for returning an unsolicited response message to said client terminal means (10) said program means including;

(b1) means to request a dialog number to identify a requesting client user;

(b2) means to assign a Transaction ID word to identify said original command transmittal request;

(c) means for enabling client-terminal operations for command execution after said original request had been initiated but before any message response was received by said client terminal from said Kerberos Server.

6. A secure message transmission system in a Kerberos environment which permits a client user to operate in a network for command transmittal and message response without suspending client service when a Kerberos Server has not yet responded to an earlier request for an authentication message code signal, said system comprising:

(a) a client terminal (10) for use of client operations with a Kerberos Server (201 and a client-server Module (13);

(b) communications connector means (18) connecting said client terminal (10) to said Kerberos Server 20 and ClearPath Server Module 13;

(c) said Kerberos Server (20) having an input port (26) and including;

(c1) a key distribution center (22) for dispensing message key code signals for message authentication;

(c2) a key administration module (24) receiving requests and sending validating code signals;

(d) said client-server (13) including;

(d1) means to receive input and send output signals in different formats;

(d2) COMS program means (42) for receiving and sending messages to/from MARC programs means (40) and to and from an originally requesting client terminal;

(d3) said MARC program means (40) for requesting a Kerberos Server Library means (34) to process requests via a Kerberos Server (20), and to check the validity and dialog number of an original client request;

(d4) said Kerberos Server Library means (34) to communicate with said Kerberos Server (20) and then execute a response message for relay back to said client terminal (10) via said MARC and COMS program means.