System and method for accessing a remote server from an intranet with a single sign-on

• US 7,512,799 B1
• Filed: 03/03/2000
• Issued: 03/31/2009
• Est. Priority Date: 03/05/1999
• Status: Expired due to Term

• Current Assignee: GetThere LP (Sabre Corp.)
• Original Assignee: GetThere, Inc. (Sabre Corp.)
• Inventors: Sundarji, Fiyaz, Chow, Chee-Seng, Chen, Jerome Tsung-Yao, Sung, James
• Primary Examiner(s): TRAN, ELLEN C
• Application Number:
  US09/518,583
• Time in Patent Office: 3,315 Days
• Field of Search: 713/172, 713/201, 380227-230, 380/21, 705 65- 69, 709/229, 707/9, 726/6, 726/8
• US Class Current: 713/172
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

A system and method for performing multiple user authentications with a single sign-on is disclosed. This system and method begins when the user performs a first user authentication, with user name and password, within the user'"'"'s Intranet. Then the user selects a remote server subsequent to the first authentication. The server in the Intranet sends a token to the remote server containing authentication information made available because of the first authentication. Finally, the remote server decodes the authentication information, which has the effect within the remote server of performing a second user authentication without the user needing to sign-on a second time.

Claims

1. A method of performing multiple user authentications with a single sign-on, comprising:

performing a first user authentication;

selecting a remote server subsequent to said first authentication;

sending a token to said remote server containing authentication information responsive to said first authentication, wherein the token also contains information regarding an account for the user including a new account for the user and wherein the information regarding an account for the user in said token includes a new user flag; and

decoding said authentication information, wherein said decoding said authentication information induces a second user authentication.

2. The method of claim 1, wherein said sending includes sending said token within a universal resource locator.

3. The method of claim 2, wherein said token includes a timestamp.

4. The method of claim 2, wherein said token is encrypted.

5. The method of claim 1, wherein said remote server creates a new user account in response to said new user flag.

6. The method of claim 1, wherein the information regarding an account for the user in said token includes user profile update information.

7. The method of claim 6, wherein said remote server updates a user profile in response to said user profile update information.

8. The method of claim 1, wherein said first user authentication occurs within an Intranet.

9. The method of claim 1, wherein said second user authentication occurs within said remote server.

10. A system for performing multiple user authentications with a single sign-on, comprising:

a user sign-on interface, configured to perform a first user authentication;

a link interface, configured to select a remote server subsequent to said first user authentication;

a token configured to be sent to said remote server, said token containing authentication information responsive to said first user authentication and information regarding an account for the user including a new account for the user and wherein the information regarding an account for the user in said token includes a new user flag; and

a decoder configured to decode said authentication information, said decoder further configured to induce a second user authentication.

11. The system of claim 10, wherein said token is coupled to a uniform resource locator.

12. The system of claim 11, wherein said token includes a timestamp.

13. The system of claim 11, wherein said token is encrypted.

14. The system of claim 10, wherein said remote server creates a new user account in response to said new user flag.

15. The system of claim 10, wherein the information regarding an account for the user in said token includes user profile update information.

16. The system of claim 15, wherein said remote server updates a user profile in response to said user profile update information.

17. The system of claim 10, wherein said first user authentication occurs within an Intranet.

18. The system of claim 10, wherein said second user authentication occurs within said remote server.

19. A system for performing multiple user authentications with a single sign-on, comprising:

means for performing a first user authentication;

means for selecting a remote server subsequent to said first authentication;

means for sending a token to said remote server containing authentication information responsive to said first authentication and information regarding an account for the user including a new account for the user and wherein the information regarding an account for the user in said token includes a new user flag; and

means for decoding said authentication information, wherein said means for decoding said authentication information induces a second user authentication.

20. A tangible machine-readable medium having stored thereon instructions for performing multiple user authentications with a single sign-on, which, when executed by a set of processors, cause said set of processors to perform the following:

performing a first user authentication;

selecting a remote server subsequent to said first authentication;

sending a token to said remote server containing authentication information responsive to said first authentication and information regarding an account for the user including a new account for the user and wherein the information regarding an account for the user in said token includes a new user flag; and

decoding said authentication information, wherein said decoding said authentication information induces a second user authentication.