Seamless authentication with proxy servers

• US 9,219,710 B2
• Filed: 03/15/2013
• Issued: 12/22/2015
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Loewenthal, Eric, Pashov, Ivan, Silvera, Jonathan, Cox, Matthew, Trunley, Paul, Zhou, Ziyan
• Primary Examiner(s): RAHIM, MONJUR
• Application Number:
  US13/831,847
• Publication Number:
  US 20140283001A1
• Time in Patent Office: 1,012 Days
• Field of Search: 726/12
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A computer can be configured to provide seamless access to a proxy server by, upon connection to a computer network, determining whether a proxy server using authentication is connected to the computer network, and then prompting a user of the computer to enter authentication information for that proxy server. This authentication information for the proxy server then can be stored in a manner accessible by applications on the computer to use the authentication information to connection with requests by the applications to access the second computer network. For example, the operating system can store the authentication information. It also can include a module that processes all requests from applications that access the proxy server, and then includes in such requests the stored authentication information.

Claims

1. A computer having a network interface for connection to a computer network, the computer comprising:

a network interface module configured, in response to connection of the network interface to a first computer network, detect whether a proxy server using authentication is connected to the first computer network, the proxy server being configured to manage access by computers on the first computer network to a second computer network;

a user interface configured to prompt a user of the computer, in response to the network interface module detecting the proxy server using authentication, to enter authentication information for the proxy server;

storage configured to store authentication information for the proxy server in a manner accessible by applications on the computer to use the authentication information to communicate requests by the applications to access the second computer network; and

the network interface module being further configured to process the requests by the applications to access the second computer network using the proxy server and being further configured to automatically include the stored authentication information from the storage with the requests.

2. The computer of claim 1, wherein the network interface module, to determine whether the proxy server uses authentication, is further configured to send a message to a computer on the second computer network and to detect an authentication error from the proxy server in reply.

3. The computer of claim 1, wherein the network interface module is configured to detect the proxy server automatically.

4. The computer of claim 1, further comprising an operating system including the network interface module.

5. The computer of claim 4, further comprising a plurality of applications, wherein the plurality of applications are configured to transmit messages to computers on the second computer network, wherein the operating system is configured to process the messages and to include the authentication information for the proxy server in the messages.

21. The computer of claim 2, further comprising an operating system including the network interface module.

22. The computer of claim 1, wherein the network interface module is further configured to verify the authentication information received from the user before storing the authentication information.

23. The computer of claim 1, wherein the network interface module is further configured to:

detect connection of the computer to another computer network different from the first and second computer networks;

in response to detection of connection to the other computer network, detecting whether the other computer network includes a proxy server using authentication;

in response to a determination that the other computer network includes a proxy server using authentication, prompt the user through the user interface for authentication information for the proxy server of the other computer network.

24. The computer of claim 23, wherein the network interface module is further configured to verify the authentication information for the proxy server of the other computer network.

25. The computer of claim 24, wherein the network interface module is further configured to store the authentication information for the proxy server of the other computer network in a manner accessible by applications on the computer.

26. The computer of claim 1, wherein the applications are configured to:

access information obtained from a computer on the second computer network accessed through the proxy server; and

update display elements of the applications using the accessed information.

6. A computer program product, comprising:

a computer storage medium comprising at least one of a memory device and a storage device;

computer program instructions stored on the computer storage medium that, when processed by a computer, instruct the computer to perform a process comprising;

in response to connection of a network interface to a first computer network, determining, using a network interface module, whether a proxy server using authentication is connected to the first computer network, the proxy server being configured to manage access by computers on the first computer network to a second computer network;

in response to determining that a proxy server using authentication is connected to the first computer network, prompting a user of the computer to enter authentication information for the proxy server;

storing the authentication information for the proxy server in a manner accessible by applications on the computer to use the authentication information to communicate requests by the applications to access the second computer network, the network interface module being configured to process the requests by the applications to access the second computer network; and

automatically including, using the network interface module the stored authentication information with the requests.

7. The computer program product of claim 6, wherein determining comprises sending a message to a computer on the second computer network and receiving an authentication error from the proxy server in reply.

8. The computer program product of claim 6, wherein determining comprises detecting the proxy server automatically.

9. The computer program product of claim 6, wherein the computer program defines an operating system.

10. The computer program product of claim 9, wherein the operating system is configured to support a plurality of applications, wherein the plurality of applications are configured to transmit messages to computers on the second computer network, wherein the operating system is configured to process the messages and to include the authentication information for the proxy server in the messages.

27. The computer program product of claim 7, wherein the computer program defines an operating system.

28. The computer program product of claim 7, wherein the applications are configured to:

access information obtained from a computer on the second computer network accessed through the proxy server; and

update display elements of the applications using the accessed information.

11. A process for managing access by a computer to a computer network, comprising:

after connection of a network interface to a first computer network, determining, using a network interface module, whether a proxy server using authentication is connected to the first computer network, the proxy server being configured to manage access by computers on the first computer network to a second computer network;

in response to determining that a proxy server using authentication is connected to the first computer network, prompting a user of the computer to enter authentication information for the proxy server;

storing the authentication information for the proxy server in a manner accessible by applications on the computer to use the authentication information to communicate requests by the applications to access the second computer network, the network interface module being configured to process the requests by the applications to access the second computer network; and

automatically including, using the network interface module, the stored authentication information with the requests.

12. The process of claim 11, wherein determining comprises sending a message to a computer on the second computer network and receiving an authentication error from the proxy server in reply.

13. The process of claim 11, wherein determining comprises detecting the proxy server automatically.

14. The process of claim 11, wherein the determining, prompting and storing is performed by an operating system of the computer.

15. The process of claim 14, wherein the operating system is configured to support a plurality of applications, wherein the plurality of applications are configured to transmit messages to computers on the second computer network, the process further comprising:

processing, by the operating system, the messages to include the authentication information for the proxy server in the messages.

16. The process of claim 11, further comprising:

verifying the authentication information received from the user before storing the authentication information.

17. The process of claim 11, further comprising:

detecting connection to another computer network different from the first and second computer networks;

in response to detection of connection to the other computer network, detecting whether the other computer network includes a proxy server using authentication;

in response to detecting the other computer network includes a proxy server using authentication, prompting the user for authentication information for the proxy server of the other computer network.

18. The process of claim 17, further comprising:

verifying the authentication information for the proxy server of the other computer network.

19. The process of claim 18, further comprising storing the authentication information for the proxy server of the other computer network in a manner accessible by applications on the computer.

20. The process of claim 15, wherein the applications are configured to update display elements based on information obtained from a source computer on the second computer network accessed through the proxy server.

29. The process of claim 12, wherein the determining, prompting and storing is performed by the operating system.

30. A computer having a network interface for connection to a computer network, the computer comprising:

one or more processing units connected to storage, the storage including computer program instructions defining an operating system, the one or more processing units being configured by execution of the operating system to;

in response to connection of the network interface to a first computer network, send a message to another computer on a second computer network;

in response to receipt of an authentication error from a proxy server as a reply to the message, present a user interface, the user interface being configured to prompt a user of the computer to enter authentication information for the proxy server;

in response to input comprising authentication information, store the authentication information for the proxy server in storage in a manner accessible by applications executing by the one or more processing units on the computer to use the authentication information to communicate requests by the applications to access the second computer network; and

in response to requests by the applications to access the second computer network through the proxy server, process the requests to automatically include the stored authentication information from the storage with the requests, and to transmit the requests with the authentication information to the second computer network through the proxy server.

31. The computer of claim 30, wherein the applications are configured to:

access information obtained from a computer on the second computer network accessed through the proxy server; and

update display elements of the applications using the accessed information.

32. The computer of claim 30, wherein the one or more processing units is further configured to verify the authentication information for the proxy server of the other computer network.

33. A computer having a network interface for connection to a computer network, the computer comprising:

a network interface module configured to, in response to connection of the network interface to a first computer network, send a message to another computer on a second computer network;

a user interface configured to prompt a user of the computer, in response to the network interface module receiving and authentication error from a proxy server, to enter authentication information for the proxy server, the proxy server being configured to manage access by computers on the first computer network to a second computer network; and

storage configured to store the authentication information for the proxy server in a manner accessible by applications on the computer to use the authentication information to communicate requests by the applications to access the second computer network;

the network interface module being further configured to process the requests by the applications to access the second computer network using the proxy server and being further configured to automatically include the stored authentication information from the storage with the requests.

34. The computer of claim 33, wherein the applications are configured to:

access information obtained from a computer on the second computer network accessed through the proxy server; and

update display elements of the applications using the accessed information.

35. The computer of claim 33, wherein the one or more processing units is further configured to verify the authentication information for the proxy server of the other computer network.