Method for authenticating a user access request

• US 7,380,273 B2
• Filed: 12/29/2005
• Issued: 05/27/2008
• Est. Priority Date: 02/06/1996
• Status: Expired due to Fees

• Current Assignee: GraphOn Corporation
• Original Assignee: GraphOn Corporation
• Inventors: Coley, Christopher D., Wesinger, Jr., Ralph E.
• Primary Examiner(s): Zia, Syed A.
• Application Number:
  US11/323,845
• Publication Number:
  US 20060112276A1
• Time in Patent Office: 880 Days
• Field of Search: None
• US Class Current: 726/12
• CPC Class Codes: G06Q 20/027 involving a payment switch or gateway
• CPC Class Codes: H04L 63/02 for separating internal from external traffic, e.g. firewalls
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1458 Denial of Service
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A firewall for authenticating a user access request is disclosed. The firewall device may include a proxy process for processing incoming connection requests. The proxy is configured to receive an access request from a user over a first communication medium and prompt the user for a username over the first communication medium. The firewall may then send a password to the user over a communication medium other than said first communication medium responsive to receiving a valid username from the user. The firewall may then verify the access request responsive to receiving the password from the user through the first communication medium. The firewall may send passwords to a mobile device for verification.

Claims

1. A method for authenticating a user access request comprising:

receiving an access request by a firewall device from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

prompting the user for a username over the first communication medium;

sending a password to said user over a communication medium other than said first communication medium responsive to receiving at least a valid user name from said user;

verifying the access request responsive to receiving said password from said user through said first communication medium; and

providing, by said firewall device, access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

2. The method of claim 1, wherein said password is sent to a mobile device.

3. The method of claim 1, wherein said password is generated by a firewall system.

4. The method of claim 3, wherein said password is generated by proxy means operable in said firewall means.

5. An apparatus for authenticating a user access request comprising:

means for receiving by a firewall device an access request from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

means for prompting said user a username over the first communication medium;

means for sending a password to said user over a communication medium other than said first communication medium responsive to receiving at least a valid user name from said user;

means for verifying the access request responsive to receiving said password from said user through said first communication medium; and

means for providing access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

6. The apparatus of claim 5, wherein said password is sent to a mobile device.

7. The apparatus of claim 5, wherein said password is generated by a firewall system.

8. The apparatus of claim 7, wherein said password is generated by proxy means operable in said firewall means.

9. A firewall for authenticating a user access request comprising:

a firewall device including at least one proxy process for processing incoming connection requests;

the at least one proxy configured to;

receive an access request from a user over a first communication medium, said access request indicating said user is requesting access to a protected device coupled to said first communication medium;

prompt said user for a username over the first communication medium;

send a password to the user over a communication medium other than said first communication medium responsive to receiving a valid username from said user;

verify the access request responsive to receiving said password from said user through said first communication medium; and

provide access to said protected element to said user over said first communication medium responsive to a successful verification of said access request.

10. The firewall of claim 9, wherein said password is sent to a mobile device.