Methods and systems for providing scalable authentication

• US 7,685,630 B2
• Filed: 05/04/2006
• Issued: 03/23/2010
• Est. Priority Date: 05/04/2006
• Status: Active Grant

• Current Assignee: GOTO Group Incorporated (LogMeIn, Inc.)
• Original Assignee: Citrix Online LLC (Cloud Software Group)
• Inventors: Mittal, Vishal, Thapliyal, Ashish V., Kennedy, John, Spataro, Tony
• Primary Examiner(s): Simitoski; Michael J
• Application Number:
  US11/381,695
• Publication Number:
  US 20070261101A1
• Time in Patent Office: 1,419 Days
• Field of Search: 726/4, 726/5, 709/225
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

Methods and systems of authenticating a plurality of users for access to an on-line group activity are described. The systems and methods prevent overloading of any participant'"'"'s computer due to authentication. In some configurations, multiple endpoints are designated as authenticators and requests for authentication are load balanced amongst the authenticators.

Claims

1. A method of authenticating a plurality of user computing devices for access to an on-line group activity, the method comprising:

(a) establishing, by a server computing device, a first authenticator for the on-line group activity, the authenticator being one of the plurality of user computing devices;

(b) determining, by one of the plurality of user computing devices, that more authenticators are needed, the determining comprising determining that the number of authenticators does not exceed a predetermined threshold; and

(c) promoting, by one of the plurality of user computing devices and in response to step (b), a member of the plurality of user computing devices to an authenticator after the member is authenticated, wherein the promoted member is able to communicate with and authenticate other user computing devices.

2. The method of claim 1 wherein execution of the determining step occurs on a periodic basis.

3. The method of claim 1 wherein execution of the determining step occurs at a random time interval.

4. The method of claim 1 wherein the determining is performed by a randomly selected authenticator on a periodic basis.

5. The method of claim 1 wherein the determining is performed by a randomly selected authenticator on a random basis.

6. The method of claim 1 wherein the determining that more authenticators are needed further comprises determining that the number of members of the on-line group activity requesting authentication by the first authenticator exceeds a predetermined threshold.

7. The method of claim 1 wherein execution of the determining step occurs responsive to an event.

8. The method of claim 7 wherein the determining step occurs in response to the addition of a participant.

9. The method of claim 7 wherein the determining step occurs in response to an authenticator having an idle status.

10. The method of claim 7 wherein the determining step occurs in response to an authenticator leaving the on-line group activity.

11. The method of claim 7 wherein the determining step occurs in response to a status change of an authenticator.

12. The method of claim 1 wherein the promoting occurs when the number of members of the on-line group activity requesting authentication by the first authenticator exceeds a predetermined threshold.

13. The method of claim 1 wherein the promoting comprises selecting a random one of the members authenticated by the first authenticator.

14. The method of claim 1 wherein the promoting comprises sending a message to a plurality of the users computing devices and promoting one of the users computing devices that responds to the message.

15. The method of claim 14 wherein the promoting comprises promoting the first user computing device to respond to the message.

16. The method of claim 14 wherein the promoting comprises promoting the last user computing device to respond to the message.

17. The method of claim 1 wherein the promoting is performed by the first authenticator.

18. A system for authenticating a plurality of users for access to an on-line group activity, the system comprising:

a server computing device, comprising a processor, that determines a first authenticator for the on-line group activity, the authenticator being one of the plurality of users;

a determination module that determines that more authenticators are needed when the number of authenticators does not exceed a predetermined threshold; and

a promoter that promotes, in response to the determination module'"'"'s determination, a member of the plurality of users to an authenticator after the member is authenticated, wherein the promoted member is able to communicate with and authenticate other users.

19. The system of claim 18 wherein the determination module operates on a periodic basis.

20. The system of claim 18 wherein the determination module operates at a random time interval.

21. The system of claim 18 wherein the determination module'"'"'s determining is performed by a randomly selected authenticator on a periodic basis.

22. The system of claim 18 wherein the determination module'"'"'s determining is performed by a randomly selected authenticator on a random basis.

23. The system of claim 18 wherein the determination module further determines that more authenticators are needed when the number of members of the on-line group activity requesting authentication by the first authenticator exceeds a predetermined threshold.

24. The system of claim 18 where in the determination module operates in response to an event.

25. The system of claim 24 wherein the event is the addition of a participant.

26. The system of claim 24 wherein the event is the transition of an authenticator to idle status.

27. The system of claim 24 wherein the event is an authenticator leaving the on-line group activity.

28. The system of claim 24 wherein the event is a status change of an authenticator.

29. The system of claim 18 wherein the promoter promotes another user when the number of members of the on-line group activity requesting authentication by the first authenticator exceeds a predetermined threshold.

30. The system of claim 18 wherein the promoter promotes a random one of the members authenticated by the first authenticator.

31. The system of claim 18 wherein the promoter includes a transmitter that transmits a message to a plurality of the users and the promoter promotes one of the users that responds to the message.

32. The system of claim 31 wherein the promoter promotes the first user to respond to the message.

33. The system of claim 31 wherein the promoter promotes the last user to respond to the message.