Method and apparatus for providing single sign-on for computation closures

• US 9,536,074 B2
• Filed: 03/28/2011
• Issued: 01/03/2017
• Est. Priority Date: 02/28/2011
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Technologies Oy (Nokia Corporation)
• Inventors: Boldyrev, Sergey, Oliver, Ian Justin
• Primary Examiner(s): Hailu, Teshome
• Application Number:
  US13/073,696
• Publication Number:
  US 20120222104A1
• Time in Patent Office: 2,108 Days
• Field of Search: 726/8
• US Class Current: 1/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

An approach is provided for providing single sign-on for computation closures. A single sign-on management platform determines to create a single sign-on computation closure in response to an initiation of a single sign-on authentication session. The single sign-on management platform also determines one or more computation entities that are to execute at least one other computation closure under the single sign-on authentication session. The single sign-on management platform further causes, at least in part, a transfer of the single sign-on computation closure to the one or more computation entities.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

a single sign-on computation closure created in response to an initiation of a single sign-on authentication session;

one or more computation entities that are to execute at least one other computation closure under the single sign-on authentication session; and

at least one determination, by at least one processor, to transfer the single sign-on computation closure to the one or more computation entities.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one execution of the single sign-on computation closure to sign the one or more computation entities,

wherein the signing of the one or more computation entities authenticates the one or more computation entities for operation under the single sign-on authentication session.

3. A method of claim 2, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a termination of the single sign-on authentication session; and

a revocation of the signing of the one or more computation entities.

4. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a processing of the single sign-on computation closure to validate the at least one other computation closure executing at the one or more computation entities.

5. A method of claim 4, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination that the at least one other computation closure is not valid under the single sign-on authentication session; and

a stopping of an execution of the at least one other computation closure at the one or more computation entities.

6. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a signing of the single sign-on computation closure for authentication of the single sign-on computation closure to the one or more computation entities.

7. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one reuse of the single sign-on computation closure for signing of the one or more computation entities under one or more subsequent single sign-on authentication sessions.

8. A method of claim 1, wherein the one or more computation entities operate at one or more levels of a computational architecture.

9. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine to create a single sign-on computation closure in response to an initiation of a single sign-on authentication session;

determine one or more computation entities that are to execute at least one other computation closure under the single sign-on authentication session; and

cause, at least in part, a transfer of the single sign-on computation closure to the one or more computation entities.

10. An apparatus of claim 9, wherein the apparatus is further caused to:

execute and/or facilitate an execution of the single sign-on computation closure to sign the one or more computation entities,

wherein the signing of the one or more computation entities authenticates the one or more computation entities for operation under the single sign-on authentication session.

11. An apparatus of claim 10, wherein the apparatus is further caused to:

determine a termination of the single sign-on authentication session; and

cause, at least in part, a revocation of the signing of the one or more computation entities.

12. An apparatus of claim 9, wherein the apparatus is further caused to:

process and/or facilitate a processing of the single sign-on computation closure to validate the at least one other computation closure executing at the one or more computation entities.

13. An apparatus of claim 12, wherein the apparatus is further caused to:

determine that the at least one other computation closure is not valid under the single sign-on authentication session; and

cause, at least in part, a stopping of an execution of the at least one other computation closure at the one or more computation entities.

14. An apparatus of claim 9, wherein the apparatus is further caused to:

cause, at least in part, a signing of the single sign-on computation closure for authentication of the single sign-on computation closure to the one or more computation entities.

15. An apparatus of claim 9, wherein the apparatus is further caused to:

cause, at least in part, reuse of the single sign-on computation closure for signing of the one or more computation entities under one or more subsequent single sign-on authentication sessions.

16. An apparatus of claim 9, wherein the one or more computation entities operate at one or more levels of a computational architecture.

17. A non-transitory computer-readable storage medium carrying one or more sequences of one or more instructions which, when executed by one or more processors, cause an apparatus to at least perform the following steps:

determining to create a single sign-on computation closure in response to an initiation of a single sign-on authentication session;

determining one or more computation entities that are to execute at least one other computation closure under the single sign-on authentication session; and

causing, at least in part, a transfer of the single sign-on computation closure to the one or more computation entities.

18. A non-transitory computer-readable storage medium of claim 17, wherein the apparatus is caused to further perform:

executing and/or facilitating an execution of the single sign-on computation closure to sign the one or more computation entities,

wherein the signing of the one or more computation entities authenticates the one or more computation entities for operation under the single sign-on authentication session.

19. A non-transitory computer-readable storage medium of claim 18, wherein the apparatus is caused to further perform:

determining a termination of the single sign-on authentication session; and

causing, at least in part, a revocation of the signing of the one or more computation entities.

20. A non-transitory computer-readable storage medium of claim 17, wherein the apparatus is caused to further perform:

processing and/or facilitating a processing of the single sign-on computation closure to validate the at least one other computation closure executing at the one or more computation entities.