Application-access authentication agent

• US 8,844,015 B2
• Filed: 01/31/2012
• Issued: 09/23/2014
• Est. Priority Date: 01/31/2012
• Status: Active Grant

• Current Assignee: Micro Focus LLC (Open Text Corporation)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Pendergrass, Eric Addkison, Wood, Matthew D., Te, Davuth, Walsh, Justin P
• Primary Examiner(s): THIAW, CATHERINE B
• Application Number:
  US13/362,290
• Publication Number:
  US 20130198828A1
• Time in Patent Office: 966 Days
• Field of Search: 726 3- 12, 709217-219, 709225-229, 713/156, 713/158
• US Class Current: 726/10
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/45 Structures or tools for the administration of authentication
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

In response to requests from a manager to the agents for connections to the applications executing, the agents authenticate the manager. In response to the authenticating, the agents establish connections to the applications. In response to the establishing of connections, the agents provide the connections to the manager.

Claims

1. A process comprising:

In response to requests from a manager for connections to applications executing on servers, authenticating said manager by agents executing using a processor on said servers, said agents having root-level access privileges to said applications, different passwords being required for root level access to each of said servers and each of said applications, a same certificate being used in authenticating said manager by each of said agents on said servers;

in response to said authenticating, establishing, using said root-level access privileges, connections to said applications by said agents; and

in response to said establishing, providing, by said agents to said manager said connections to said applications;

prior to said authenticating of said manager by said agents, authenticating, by said servers, said manager.

2. A process as recited in claim 1 further comprising:

in response to said authenticating by said servers, said manger installing said agents on said servers.

3. A process as recited in claim 2 further comprising, prior to said authenticating of said manager by said agents, said agents listening for said manager on specified virtual ports and not on other virtual ports.

4. A process as recited in claim 1 further comprising said manager updating said applications using said connections.

5. A process as recited in claim 1 wherein said establishing includes bypassing external-user authenticators included in said applications and used to authenticate users to said applications.

6. A system comprising:

storage media encoded with code that, when executed by processors, implements plural agents on plural servers, said agents accepting a same certificate for authentication, each of said agents including;

a manager interface to interface with a manager to receive or fulfill a request by said manager for access to an application executing on a same server as said agent, said manager interface including an authenticator for authenticating said manager using said certificate not required by said application and not required by an operating system executing on said server for root-level access; and

an application interface to provide, using root-level access privileges of said agent to said application, a connection between said agent and said application so that said manager interface provides, in response to said request, a connection between said manager and said application.

7. A system as recited in claim 6 further comprising said processor.

8. A system as recited in claim 6 wherein said code further implements said application, said application including an external-user authenticator for authenticating a user requesting access to said application, said agent being configured to bypass said user authenticator when providing said connection.

9. A system as recited, in claim 6 wherein said code further implements an operating system executing on said server, said operating system including an authenticator to authenticate said manager for the purpose of installing said agent, said authenticator requiring a password for root-level access to said application, said password not being required by said agent to authenticate said manager.

10. A system as recited in claim 6 wherein said code further implements each of said agents having an authenticator that uses said certificate to authorize said manager.