Authenticating user access to a network server without communicating user authentication cookie to the network server
First Claim
1. A method of granting access to a network server, the method comprising:
- receiving a request by a user to gain access to the network server through an Internet browser operated by the user;
generating a request to authenticate the user;
communicating the request to an authentication server;
receiving a message from the authentication server indicating whether the user is authenticated, wherein;
the authentication server provides a cookie to the Internet browser operated by the user if the user is authenticated by the authentication server; and
the cookie cannot be read by the network server;
granting access to the user if the user is authenticated by the authentication server, wherein granting access comprises redirecting the Internet browser to the network server; and
denying access to the user if the user is not authenticated by the authentication server.
1 Assignment
0 Petitions
Accused Products
Abstract
A system determines whether to grants access to a network server by a user. Initially, a user attempts to gain access to a network server, such as a web server. Prior to granting access to the network server, the network server authenticates the user by sending an authentication request to an authentication server. The authentication server determines whether the user was already authenticated by the authentication server. If the user was already authenticated by the authentication server, then the network server is notified that the user is authenticated. The network server then grants the user access to the network server. If the user was not already authenticated by the authentication server, then login information is retrieved from the user and compared to authentication information maintained by the authentication server. If the retrieved login information matches the authentication information, then the network server is notified that the user is authenticated. The retrieved login information and the authentication information is concealed from the network server. If the user is authenticated, then a user profile is communicated to the network server along with the notification that the user is authenticated. If the user is successfully authenticated, then a cookie is provided to an Internet browser operated by the user. The cookie contains information regarding user authentication, the user'"'"'s profile, and a list of network servers previously visited by the user.
-
Citations
19 Claims
-
1. A method of granting access to a network server, the method comprising:
-
receiving a request by a user to gain access to the network server through an Internet browser operated by the user; generating a request to authenticate the user; communicating the request to an authentication server; receiving a message from the authentication server indicating whether the user is authenticated, wherein; the authentication server provides a cookie to the Internet browser operated by the user if the user is authenticated by the authentication server; and the cookie cannot be read by the network server; granting access to the user if the user is authenticated by the authentication server, wherein granting access comprises redirecting the Internet browser to the network server; and denying access to the user if the user is not authenticated by the authentication server. - View Dependent Claims (2, 3, 4, 5, 6)
-
-
7. One or more computer-readable media having stored thereon a computer program comprising the following steps:
-
receiving a request by a user to gain access to a network server via an Internet browser operated by the user; generating a request to authenticate the user; communicating the request to an authentication server; receiving a message from the authentication server indicating whether the user is authenticated; receiving a user profile from the authentication server if the user is authenticated by the authentication server, granting access to the user if the user is authenticated by the authentication server, wherein granting access comprises redirecting the Internet browser to the network server; providing a cookie to the Internet browser operated by the user if the user is authenticated by the authentication server, wherein the cookie is provided by the authentication server and cannot be read by the network sewer; and denying access to the user if the user is not authenticated by the authentication server. - View Dependent Claims (8, 9)
-
-
10. One or more computer-readable media having stored thereon a computer program including instructions for a computer process comprising:
-
receiving a request at an authentication server to authenticate a user, responsive to a request by the user to gain access to a network server through a browser being operated by the user; if the user has not already been authenticated by the authentication server prior to receipt of the request by the authentication server, receiving user login information from the user, wherein communication of the user login information from the user to the authentication server bypasses the network server; transmitting a message from the authentication server indicating whether the user is authenticated, wherein the network server grants the user access to the network server based on the message if the user is authenticated by the authentication server and the network server denies the user access to the network server based on the message if the user is not authenticated by the authentication server; providing a cookie to the browser operated by the user if the user is authenticated by the authentication server, wherein the cookie is provided by the authentication server and cannot be read by the network server; and redirecting the browser to the network server if the user is authenticated by the authentication server. - View Dependent Claims (11, 12, 13)
-
- 14. A system for authenticating a user attempting to access a first network server via a browser operating on a client computer, the system comprising an authentication server that receives a request to access the first network server by the user and redirects the browser back to the first network server after the user is authenticated, wherein the authentication server sends a message to the first network server indicating that the user has been authenticated, and sends a cookie to the client computer, the cookie not being readable by the first network server.
Specification