Single sign-on method in multi-application framework

• US 8,996,857 B1
• Filed: 06/05/2007
• Issued: 03/31/2015
• Est. Priority Date: 06/05/2006
• Status: Active Grant

• Current Assignee: Refinitiv US Organization, LLC (Refinitiv US Holdings, Inc.)
• Original Assignee: Thomson Financial LLC (Refinitiv US Holdings, Inc.)
• Inventors: Akella, Sujan, Russin, Michael, Kolyakov, Yevgeny, Nara, Vijay
• Primary Examiner(s): HENNING, MATTHEW T
• Application Number:
  US11/758,087
• Time in Patent Office: 2,856 Days
• Field of Search: 726/8
• US Class Current: 713/153
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity

Abstract

A method and system for allowing a single-sign on to access independently purveyed applications with a highly secure single-sign methodology which permits wide area public access, such as through the Internet, to private access weaker credentialed sign-on applications without a need to upgrade the credential requirements for access to the applications.

Claims

1. A method for single sign-on to servers in a client-server network comprising:

receiving at a framework server a request from a browser via a load balancer, said load balancer decrypting said request and including digital sign-on credentials;

sending an encrypted response from said framework server configured to generate a number of application Iframes and a connection between said framework server and said browser;

receiving at a proxy server, a request from a URL within one or more of said Iframes via said load balancer;

causing said proxy server in conjunction with said framework server to authenticate said credentials;

determining, by said proxy server, the applications requested and confirming that said applications reside on applications servers;

providing, by said proxy server, credentials required for sign-on to appropriate application servers;

causing an indirect communicative connection between said browser and said appropriate application servers through said proxy server; and

causing content from said appropriate applications servers to be supplied to said proxy server, wherein said content is further supplied to said browser.

2. The method of claim 1 wherein said providing, by said proxy server, credentials required for sign-on to appropriate application servers is effectuated by way of a pointer associating said digital sign-on credentials for the client-server system with said credentials required for sign-on to said appropriate application servers.

3. The method of claim 1 wherein said applications requested are accessible through a private-access network.

4. The method of claim 1 wherein said applications requested are accessible through a publicly-accessible network.

5. The method of claim 4 wherein the publicly-accessible network is the Internet.

6. The method of claim 1 wherein the client-server network is a publicly-accessible network.