Authenticating cloud computing enabling secure services
Authenticating cloud computing enabling secure services (ACCESS) offloads “client authentication” activity onto a third-party authenticating cloud computing enabling secure services (ACCESS) node. Instead of having a client device authenticate itself directly to a network server, the client device instead authenticates itself to a third-party authenticating cloud computing enabling secure services (ACCESS) node. The authenticating cloud computing enabling secure services (ACCESS) node then provides credentials that are used by the client device to communicate directly with the server (and utilize the service) without any further authentication being necessary.
1. A method of pre-authenticating a client device for direct access to a cloud-based secure service, comprising:
receiving a request for pre-authorization from a client device, at an access node separate from a cloud-based secure service server;
receiving credentials from said client device, at said access node separate from said cloud-based secure service server, said credentials comprising a registration message encrypted using a shared secret cryptographic key;
passing a pre-authorized authentication token together with a redirect to said client device, said pre-authorized authentication token for provision by said client device directly to said cloud-based secure service server without passage through said access node;
providing a push or pull notification, when authenticated, from said access node to said cloud-based secure service server, said notification identifying said client device;
receiving a request at said access node, from said cloud-based secure service server, to verify validity of said pre-authorized authentication token received by said cloud-based secure service server from said client device; and
receiving a request from said cloud-based secure service server for additional information regarding authentication of said client device to access a cloud-based secure service on said cloud-based secure service server;
whereby said client device directly provides its own authorization token directly to said cloud-based secure service server bypassing said access node to directly access said cloud-based secure service server.
2. Apparatus to pre-authenticate a client device for direct access to a cloud-based secure service, comprising:
means for receiving a request for pre-authorization from a client device, at an access node separate from a cloud-based secure service server;
means for receiving credentials from said client device, at said access node separate from said cloud-based secure service server, said means for receiving credentials receives a registration message encrypted using a shared secret cryptographic key;
means for passing a pre-authorized authentication token together with a redirect to said client device, said pre-authorized authentication token for provision by said client device directly to said cloud-based secure service server without passage through said access node;
means for providing a push or pull notification, when authenticated, from said access node to said cloud-based secure service server, said notification identifying said client device;
means for receiving a request at said access node, from said cloud-based secure service server, to verify validity of said pre-authorized authentication token received by said cloud-based secure service server from said client device; and
means for receiving a request from said cloud-based secure service server for additional information regarding authentication of said client device to access a cloud-based secure service on said cloud-based secure service server;
whereby said client device is enabled to directly provide its own authorization token directly to said cloud-based secure service server, bypassing said access node, to directly access said cloud-based secure service server.