Proxy authentication for a multiple core network device
View Patent ↗The present invention is generally related to a network computing device including a first processor communicating with a second processor as a proxy for a client device when authenticating access privileges of the client device. The present invention may include more than two processors where at least one of the multiple processors may be optimized for performing one or more control functions and one or more other processors may be optimized for transferring data or administrating the transfer of data through a gateway or firewall.
1. A method for authorizing the access privileges of a client device, the method comprising:
a computing device receiving an authorization request to access a computing resource on a computing network, wherein the computing device includes a plurality of processors, and the authorization request is received over a first network communication interface from the client device at a first processor of the plurality of processors;
creating a communication pathway between the first processor and a second processor of the plurality of processors, wherein the communication pathway between the first processor and the second processor is a socket communication that associates a first set of program code with a second set of program code;
the first processor executing the first set of program code that admintistrates forwarding of information from the authorization request to the second processor in a communication, the communication identifying an internet protocol (IP) address and a port number associated with the client device;
the second processor executing the second set of program code that administrates the transmission of a request that corresponds to the authorization request to an authorization server;
receiving a response to the corresponding request from the authentication server by the second processor;
transmitting information from the received response over the communication pathway to the first processor in a second communication, wherein the second communication is from the second processor to the first processor, and the IP address and the port of the client device are identified by the second communication;
the first processor forwarding at least a portion of the information from the response to the client device over the first network computing interface; and
allowing the client device to access the computing resource when information in the forwarded response indicates that the client device is authorized to access the computing resource.
2. The method of claim 1 , wherein the first set of program code is optimized for managing the transfer of data, and the second set of program code is optimized for administrating control functions.
3. The method of claim 2 , wherein the second set of program code includes operating system software.
4. The method of claim 1 , wherein the corresponding request is transmitted over a second network communication interface to the authentication server, and the response received from the authentication server is received over the second network communication interface.
5. The method of claim 2 , wherein the authentication server authenticates credentials of the client device by comparing information stored at the authentication server with the information from the corresponding request, and the response received from the authentication server indicates that the client device has been granted access to the requested computing resource.
6. A non-transitory computer readable storage medium having embodied thereon a program executable by one or more processors for authorizing the access privileges of a client device, the method comprising:
a computing device receiving an authorization request to access a computing resource on a computing network, wherein the computing device includes a plurality of processors, and the authorization request is received over a first network communication interface from a client device at a first processor of the plurality of processors;
creating a communication pathway between the first processor and a second processor of the plurality of processors, wherein the communication pathway between the first processor and the second processor is a socket communication that associates a first set of program code with a second set of program code;
the first processor executing the first set of program code that administrates forwarding of information from the authorization request to the second processor in a communication, the communication identifying an internet protocol (IP) address and a port number associated with the client device;
the second processor executing the second set of program code that administrates the transmission of a request that corresponds to the authorization request to an authorization server;
receiving a response to the corresponding request from the authentication server by the second processor;
transmitting information from the received response over the communication pathway to the first processor in a second communication, wherein the second communication is from the second processor to the first processor, and the IP address and the port of the client device are identified by the second communication;
the first processor forwarding at least a portion of the information from the response to the client device over the first network computing interface; and
allowing the client device to access the computing resource when information in the forwarded response indicates that the client device is authorized to access the computing resource.
7. The non-transitory computer readable storage medium of claim 6 , wherein the first set of program code is optimized for managing the transfer of data, and the second set of program code is optimized for administrating control functions.
8. The non-transitory computer readable storage medium of claim 7 , wherein the second set of program code includes operating system software.
9. The non-transitory computer readable storage medium of claim 6 , wherein the corresponding request is transmitted over a second network communication interface to the authentication server, and the response received from the authentication server is received over the second network communication interface.
10. The non-transitory computer readable storage medium of claim 7 , wherein the authentication server authenticates credentials of the client device by comparing information stored at the authentication server with the information from the corresponding request, and the response received from the authentication server indicates that the client device has been granted access to the requested computing resource.
11. A system for authorizing the access privileges of a client device, the system comprising:
a memory;
a first processor;
a second processor; and
a first network computing interface, wherein:
an authorization request to access a computing resource is received over the first network communication interface from a client device, and information in the authorization request includes information is received by a first processor,
the first processor executing a first set of program code creates a communication pathway between the first processor and the second processor executing a second set of program code,
the communication pathway between the first processor and the second processor is a socket communication that associates the first set of program code with the second set of program code,
the first processor executing the first set of program code forwards the information from the authentication request in a communication over the communication pathway to the second processor, the forwarded communication identifies the internet protocol address and a port number associated with the client device,
the second processor executing the second set of program code that administrates the transmission of a request that corresponds to the authorization request to an authorization server, the second processor receives a response to the corresponding request from the authentication server,
the second processor administrates the transmission of information from the received response over the communication pathway to the first processor in a second communication, wherein the second communication is from the second processor to the first processor, and the IP address and the port of the client device are identified by the second communication, the first processor forwards at least a portion of the information from the response to the client device over the first network computing interface, and
the client device is allowed to access the computing resource when information in the forwarded response indicates that the client device is authorized to access the computing resource.
12. The system of claim 11 , wherein the first set of program code is optimized for managing the transfer of data, and the second set of program code is optimized for administrating control functions.
13. The system of claim 12 , wherein the second set of program code includes operating system software.
14. The system of claim 12 , further comprising a second network communication interface, wherein the corresponding request is transmitted over the second network communication interface to the authentication server, and the response received from the authentication server is received over the second network communication interface.
15. The system of claim 12 , wherein the authentication server authenticates credentials of the client device by comparing information stored at the authentication server with the information from the corresponding request, and the response received from the authentication server indicates that the client device has been granted access to the requested computing resource.