Communication session termination rankings and protocols

• US 9,083,690 B2
• Filed: 01/30/2013
• Issued: 07/14/2015
• Est. Priority Date: 01/30/2013
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Subramanya, Ramya Kukkehali, Mathew, Stephen, Koottayi, Vipin Anaparakkal
• Primary Examiner(s): Powers, William
• Assistant Examiner(s): Tran, Tongoc
• Application Number:
  US13/754,314
• Publication Number:
  US 20140215548A1
• Time in Patent Office: 895 Days
• Field of Search: 726 1- 5
• US Class Current: 1/1
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method of handling a plurality of session requests at an access manager may include assigning a rank to each of a plurality of agents. Each of the plurality of agents may forward requests for protected resources to the access manager for authentication and/or authorization, and the access manager may establish a plurality of sessions. The method may also include establishing a first session that is associated with a first agent in the plurality of agents that is assigned a first rank, a first user device, and/or a user credential. The method may additionally include receiving a request to establish a second session that is associated with a second agent in the plurality of agents that is assigned a second rank, a second user device, and/or the user credential. The method may further include determining whether the second session should be established.

Claims

1. A method of handling a plurality of session requests at an access manager, the method comprising:

assigning a rank to each of a plurality of agents, wherein;

each of the plurality of agents forwards requests for protected resources to the access manager for authentication and/or authorization; and

the access manager establishes a plurality of sessions between user devices and the plurality of agents;

establishing, by the access manager, a first session that is associated with;

a first agent in the plurality of agents that is assigned a first rank,

a first user device, and

a user credential;

receiving a request to establish a second session that is associated with;

a second agent in the plurality of agents that is assigned a second rank,

a second user device, and

the user credential;

determining whether the second session should be established based on the first rank and the second rank.

2. The method of claim 1 wherein the first rank indicates that the first session should always receive precedence.

3. The method of claim 2 wherein the first session comprises a file transfer through the first agent.

4. The method of claim 3 wherein the access manager is configured to allow only a single session per credential.

5. The method of claim 1 wherein the first device comprises a computer terminal and the second device comprises a smart phone.

6. The method of claim 1 wherein the first rank is based on an authentication policy associated with the first agent.

7. The method of claim 1 wherein the first rank is based on a security level of a resource protected by the first agent.

8. The method of claim 1 wherein the first rank is based on a resource type of a resource protected by the first agent.

9. The method of claim 1 wherein the first session is also associated with a third agent having a third rank, and the determining as to whether the second session should be established is also based on a combination of the first rank and the third rank.

10. The method of claim 1 further comprising, in response to a determination that the second session should be established, terminating the first session.

11. The method of claim 1 further comprising, in response to a determination that the second session should not be established, sending an indication to the second user device indicating that the second session has been refused.

12. The method of claim 1 wherein the first agent and the second agent are the same agent.

13. The method of claim 1 wherein the first agent comprises a WebGate.

14. The method of claim 1 wherein the second agent comprises a gateway controlling access to an application hosted by an Enterprise Software System.

15. A computer-readable memory comprising a sequence of instructions which, when executed by one or more processors, causes the one or more processors to handle a plurality of session requests at an access manager by:

assigning a rank to each of a plurality of agents, wherein;

each of the plurality of agents forwards requests for protected resources to the access manager for authentication and/or authorization; and

the access manager establishes a plurality of sessions between user devices and the plurality of agents;

establishing, by the access manager, a first session that is associated with;

a first agent in the plurality of agents that is assigned a first rank,

a first user device, and

a user credential;

receiving a request to establish a second session that is associated with;

a second agent in the plurality of agents that is assigned a second rank,

a second user device, and

the user credential;

determining whether the second session should be established based on the first rank and the second rank.

16. The computer-readable memory according to claim 15 wherein the first rank is based on an authentication policy associated with the first agent.

17. The computer-readable memory according to claim 15 wherein the first rank is based on a security level of a resource protected by the first agent.

18. The computer-readable memory according to claim 15 wherein the first rank is based on a resource type of a resource protected by the first agent.

19. A system comprising:

one or more processors; and

a memory communicatively coupled with and readable by the one or more processors and comprising a sequence of instructions which, when executed by the one or more processors, cause the one or more processors to handle a plurality of session requests at an access manager by;

assigning a rank to each of a plurality of agents, wherein;

each of the plurality of agents forwards requests for protected resources to the access manager for authentication and/or authorization; and

the access manager establishes a plurality of sessions between user devices and the plurality of agents;

establishing, by the access manager, a first session that is associated with;

a first agent in the plurality of agents that is assigned a first rank,

a first user device, and

a user credential;

receiving a request to establish a second session that is associated with;

a second agent in the plurality of agents that is assigned a second rank,

a second user device, and

the user credential;

determining whether the second session should be established based on the first rank and the second rank.

20. The system of claim 19 wherein the first session is also associated with a third agent having a third rank, and the determining as to whether the second session should be established is also based on a combination of the first rank and the third rank.