Adding biometric identification to the client security infrastructure for an enterprise service bus system

• US 9,246,908 B2
• Filed: 01/08/2009
• Issued: 01/26/2016
• Est. Priority Date: 01/08/2009
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Little, Mark Cameron
• Primary Examiner(s): Siddiqi, Mohammad A
• Application Number:
  US12/350,906
• Publication Number:
  US 20100175121A1
• Time in Patent Office: 2,574 Days
• Field of Search: 726/10, 726 2- 5, 726/21
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231

Abstract

An enterprise service bus client accesses a user'"'"'s biometric information, where the biometric information is accessed from a biometric input device coupled to the enterprise service bus client. Furthermore, the enterprise service bus client retrieves a certificate using the user'"'"'s biometric information. With the certificate, the enterprise service bus client establishes a connection with an enterprise service bus server and accesses an enterprise service bus service.

Claims

1. A method comprising:

accessing biometric information of a user with an enterprise service bus (ESB) client, the biometric information accessed from a biometric input device coupled to the ESB client;

submitting, by a processing device of the ESB client, a query to a certificate database local to the ESB client, wherein the query includes only the biometric information;

identifying, by the processing device of the ESB client, a stored certificate for use in connecting with an ESB server by matching only the biometric information provided in the query with biometric information stored in association with the stored certificate in the certificate database local to the ESB client;

determining, by the processing device of the ESB client, if the user is a valid ESB user authorized to access one or more ESB services via the ESB server by matching the biometric information provided in the query with the biometric information stored in the certificate database local to the ESB client;

after determining the user is a valid ESB user, retrieving, by the processing device of the ESB client, the stored certificate using the biometric information; and

establishing, by the processing device of the ESB client, a direct connection with the ESB server using the retrieved certificate.

2. The method of claim 1, wherein the biometric information is at least one of fingerprint information, retinal information, facial characteristics, hand geometry, voice characteristics, or deoxyribonucleic acid information.

3. The method of claim 1, wherein the biometric input device is at least one of a fingerprint scanner, facial recognition system, hand geometry recognition system, voice analyzer, or DNA analyzer.

4. A non-transitory computer readable storage medium having instructions stored thereon that, when executed by a processing system, cause the processing system to:

access biometric information of a user with an enterprise service bus (ESB) client, the biometric information accessed from a biometric input device coupled to the ESB client;

submit a query to a certificate database local to the ESB client, wherein the query includes only the biometric information;

identify a certificate for use in connecting with an ESB server by matching only the biometric information provided in the query with biometric information stored in association with the stored certificate in the certificate database local to the ESB client;

determine, by the ESB client, if the user is a valid ESB user authorized to access one or more services via the ESB server by comparing the biometric information provided in the query with the biometric information stored in a certificate database local to the ESB client;

after the user is determined to be a valid ESB user, retrieve, by the ESB client, the stored certificate using the biometric information; and

establish, by the ESB client, a direct connection with an enterprise service bus server using the retrieved certificate.

5. The non-transitory computer readable storage medium of claim 4, wherein the biometric information is at least one of fingerprint information, retinal information, facial characteristics, hand geometry, voice characteristics, or deoxyribonucleic acid information.

6. The non-transitory computer readable storage medium of claim 4, wherein the biometric input device is one of fingerprint scanner, facial recognition system, hand geometry recognition system, voice analyzer, or DNA analyzer.

7. An enterprise service bus (ESB) client comprising:

a biometric information accessing device module of the ESB client to access biometric information of a user, the biometric information accessed from a biometric input device operatively coupled to the client;

a certificate retrieving device module of the ESB client, coupled to biometric information accessing device module, the certificate retrieving device module to;

submit a query to a certificate database local to the ESB client, wherein the query includes only the biometric information;

identify a stored certificate for use in connecting with an ESB server by matching only the biometric information provided in the query with biometric information stored in association with the stored certificate in the certificate database local to the ESB client;

determine if the user is a valid ESB user authorized to access one or more services via the ESB server by comparing the biometric information provided in the query with the biometric information stored in a certificate database local to the client; and

retrieve, after the user is determined to be a valid ESB user, the stored certificate using the biometric information; and

a client connection device module of the ESB client, coupled to biometric information accessing device module, to establish a direct connection with the enterprise service bus server using the retrieved certificate.

8. The ESB client of claim 7, wherein the biometric information is at least one of fingerprint information, retinal information, facial characteristics, hand geometry, voice characteristics, or deoxyribonucleic acid information.

9. The ESB client of claim 7, the certificate retrieving device module to query the certificate database using the biometric information, and to receive the stored certificate if there is a match of the biometric information in the certificate database.

10. The ESB client of claim 7, wherein the biometric input device is at least one of a fingerprint scanner, facial recognition system, hand geometry recognition system, voice analyzer, or DNA analyzer.