Systems and methods for user login

• US 8,020,195 B2
• Filed: 03/30/2007
• Issued: 09/13/2011
• Est. Priority Date: 03/30/2007
• Status: Expired due to Fees

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Williams, David, Frost, Simon
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): ABEDIN, SHANTO
• Application Number:
  US11/693,991
• Publication Number:
  US 20080244718A1
• Time in Patent Office: 1,628 Days
• Field of Search: 726/2, 726/4, 726/5, 726/6, 726/8, 726/3, 713/155, 713/168, 713/182, 713/185, 709/227, 709/228, 709/229
• US Class Current: 726/3
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

Systems and methods for login a user into a computing system are shown and described. The method can include receiving a request for an anonymous user login, creating an identifying tag responsive to the received request, creating a user account incorporating the identifying tag, and providing to the computing system the created user account to log into the computing system.

Claims

1. A method for distinguishing between sessions associated with anonymous users, the method comprising:

receiving, by a server from a client, a first anonymous request for login by a user operating the client, the first request comprising an identification number;

creating, by the server in response to receiving the request, a first identifying tag comprising at least a part of the identification number;

validating, by the server, the first identifying tag to determine whether the first identifying tag has been used;

creating, by the server upon determining the first identifying tag has not been used, an anonymous user account incorporating the first identifying tag;

logging, by the server, the user into a session of the server using the anonymous user account;

disconnecting the session associated with the anonymous user account;

storing, upon disconnection of the session, the first identifying tag and information about a state of the session;

receiving, by the server, a second anonymous request from the user for login, the second request comprising the identification number;

creating, by the server in response to receiving the second request, a second identifying tag comprising at least a part of the identification number;

comparing the second identifying tag with the first identifying tag of the disconnected session; and

reconnecting the user to the disconnected session and the anonymous user account responsive to the comparison.

2. The method of claim 1, further comprising retrieving data from the client.

3. The method of claim 1, further comprising:

determining the first identifying tag is not valid; and

associating in response to the determination the first identifying tag with a generic name.

4. The method of claim 1, wherein creating a first identifying tag further comprises creating a first identifying tag having an alphanumeric string.

5. The method of claim 1, further comprising validating a name of the created user account.

6. The method of claim 1, wherein comparing the second identifying tag with the first identifying tag further comprises comparing the tags using one of:

string comparison, regular expression comparison, numerical equivalence, and comparison using content of the identifying tag.

7. The method of claim 1, wherein reconnecting further comprises reconnecting the disconnected session after determining the disconnected session is not stale.

8. The method of claim 1, wherein storing information on the state of the session further comprises storing information comprising:

information about applications executing when the session disconnected;

a list of open files; and

file transfer status information.

9. The method of claim 1, wherein receiving the first request comprising the identification number further comprises receiving the first request comprising an identification number of a smartcard.

10. A system for distinguishing between sessions associated with anonymous users, the system comprising:

a client computing device; and

a server;

receiving, from the client computing device, a first anonymous request from for login by a user, the first request comprising an identification number,

creating a first identifying tag in response to receiving the request, the first identifying tag comprising at least a portion of the identification number,

validating the first identifying tag to determine whether the first identifying tag has been used,

creating, upon determining the first identifying tag has not been used, an anonymous user account incorporating the first identifying tag,

logging the user into a session of the server using the anonymous user account,

disconnecting the session associated with the anonymous user account,

storing, upon disconnection of the session, the first identifying tag and information about a state of the session,

receiving, from the client computing device, a second anonymous request from the user for login, the second request comprising the identification number;

creating, in response to receiving the second request, a second identifying tag comprising at least a part of the identification number;

comparing the second identifying tag with the first identifying tag of the disconnected session; and

reconnecting the user to the disconnected session and the anonymous user account responsive to the comparison.

11. The system of claim 10, wherein the server retrieves data from the client computing device.

12. The system of claim 10, wherein the server determines the first identifying tag is not valid, and associates, in response to the determination, the first identifying tag with a generic name.

13. The system of claim 10, wherein the server creates a first identifying tag comprising an alphanumeric string.

14. The system of claim 10, wherein the server validates a name of the created user account.

15. The system of claim 10, wherein the server compares the second identifying tag with the first identifying tag by using one of:

string comparison, regular expression comparison, numerical equivalence, and comparison using content of the identifying tag.

16. The system of claim 10, wherein the server reconnects the disconnected session after determining the disconnected session is not stale.

17. The system of claim 10, wherein the information on the state of the session comprises:

information about applications executing when the session disconnected;

a list of open files; and

file transfer status information.

18. The system of claim 10, wherein the identification number comprises an identification number of a smartcard.