Method for authenticating a user access request

• US 7,360,244 B2
• Filed: 12/29/2005
• Issued: 04/15/2008
• Est. Priority Date: 02/06/1996
• Status: Expired due to Fees

• Current Assignee: GraphOn Corporation
• Original Assignee: GraphOn Corporation
• Inventors: Coley, Christopher D., Wesinger, Jr., Ralph E.
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US11/323,504
• Publication Number:
  US 20060112424A1
• Time in Patent Office: 838 Days
• Field of Search: None
• US Class Current: 726/11
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A firewall for authenticating a user access request is disclosed. The firewall device may include a proxy process for processing incoming connection requests. The proxy is configured to receive an access request from a user over a first communication medium and prompt the user for a username and a first password portion over the first communication medium. The firewall may then send a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user. The firewall may then verify the access request responsive to receiving the second password portion from the user through the first communication medium. The firewall may send passwords to a mobile device for verification.

Claims

1. A method for authenticating a user access request comprising:

receiving an access request by a firewall device from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

prompting the user for a username and a first password portion over the first communication medium;

sending a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user;

verifying the access request responsive to receiving said second password portion from the user through said first communication medium; and

providing, by said firewall device, access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

2. The method of claim 1, wherein said password is sent to a mobile device.

3. The method of claim 1, wherein said password is generated by a firewall system.

4. The method of claim 3, wherein said password is generated by proxy operable in said firewall system.

5. An apparatus for authenticating a user access request comprising:

means for receiving an access request from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

means for prompting the user for a username and a first password portion over the first communication medium;

means for sending a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user;

means for verifying the access request responsive to receiving said second password portion from the user through said first communication medium; and

means for providing access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

6. The method of claim 5, further comprising means for sending said password a mobile device.

7. The method of claim 5, wherein said password is generated by firewall means.

8. The method of claim 7, wherein said password is generated by proxy means operable in said firewall means.

9. A firewall for authenticating a user access request comprising:

a firewall device including at least one proxy process for processing incoming connection requests;

the at least one proxy configured to;

receive an access request from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

prompt the user for a username and a first password portion over the first communication medium;

send a second password portion to the user over a communication medium other than said first communication medium responsive to receiving a valid user name and first password portion pair from the user;

verify the access request responsive to receiving said second password portion from the user through said first communication medium; and

provide access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

10. The firewall of claim 9, wherein said password is sent to a mobile device.