IP Library Granted Patent US 10,021,084
Granted Patent B2
US 10,021,084 · App. 14/918,705 · Granted Jul 10, 2018

Systems and methods for credentialing of non-local requestors in decoupled systems utilizing a domain local authenticator

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,021,084
App. No.
14/918,705
Granted
Jul 10, 2018
Kind
B2
Abstract

Embodiments as disclosed provide systems and methods that use a local authenticator within a domain to provide a credential to access a resource of the domain to a non-local requestor. When a request is received from a non-local requestor at the domain the non-local requestor can be authenticated based on the request. The local authenticator can then be accessed to obtain a credential. This credential may be the same type of credential provided to members of the domain when they authenticate using the local authenticator. The credential is provided to the non-local requestor so the non-local requestor can access the resource of the domain using the credential and authentication of the non-local requestor with respect to these accesses can be accomplished using the local domain authenticator and the credential.

Claims (34)

1. A system, comprising:

a domain comprising a data center including an managed file transfer (MFT) Instance, including:

a processor coupled to a memory;

a set of resources including a managed file transfer service for transferring files between a set of servers by:

receiving a file transfer request from a sender to send a file to a recipient;

determining a location of the recipient;

determining a location server that is closest to the location of the recipient;

and

automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;

a local domain authenticator for:

providing a credential for a member of the domain to use in accessing the set of resources of the domain during a session;

authenticating the credential associated with a member of the domain, and a remote authenticator which is part of a cloud based MFT system, for:

providing the credential to a non-local requestor which is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and is not a member of the domain by:

receiving an authentication request from the non-local requestor outside the domain, wherein the request is to be authenticated for accessing the set of resources;

authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;

accessing the local domain authenticator to obtain the credential associated with the domain; and

providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator and the credential.

2. The system of claim 1 , wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.

3. The system of claim 1 , wherein authenticating a non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.

4. The system of claim 3 , wherein authenticating a non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.

5. The system of claim 4 , wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.

6. The system of claim 1 , wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.

7. The system of claim 6 , wherein the authentication server uses OpenText Directory Services (OTDS).

8. A method, comprising:

receiving, at a remote authenticator in a domain with a set of resources, an authentication request from a non-local requestor which is not a member of the domain, wherein the request is to be authenticated for accessing the set of resources, the domain comprises a data center including a managed file transfer (MFT) Instance, the remote authenticator is part of a cloud based MFT system, the non-local requestor is a cloud command center operable for the coordination of MFT instances as part of the cloud based MFT system, and wherein the set of resources includes a managed file transfer service for transferring files between a set of servers by: receiving a file transfer request from a sender to send a file to a recipient, determining a location of the recipient, determining a location server that is closest to the location of the recipient, and automatically initiating a server-to-server transfer to move the file to the location server that is closest to the location of the recipient;

authenticating the non-local requestor using the authentication request without use of any domain credentials for the non-local requestor for any domain by verifying the authentication request using a secure protocol;

accessing a local domain authenticator to obtain a credential, wherein the credential is for a member of the domain to use in accessing the set of resources of the domain during a session; and

providing the credential to the non-local requestor, wherein the non-local requestor can access the set of resources of the domain during a session maintained between the non-local requestor and the domain using the credential and authentication of an access of the non-local requestor to the set of resources during the session is performed using the local domain authenticator to authenticate the credential.

9. The method of claim 8 , wherein the authentication of the non-local requestor using the authentication request is accomplished using the Secure Shell (SSH) protocol.

10. The method of claim 8 , wherein authenticating the non-local requestor which is not a member of the domain includes updating session data associated with the non-local requestor to indicate that the non-local requestor has been authenticated.

11. The method of claim 10 , wherein authenticating the non-local requestor which is not a member of the domain is done by receiving a credential request from the non-local requestor and, in response to the credential request, accessing the session data for the non-local requestor to determine if the non-local requestor has been authenticated.

12. The method of claim 11 , wherein the remote authenticator has a local account with the local domain authenticator and the credential is associated with the local account.

13. The method of claim 8 , wherein the MFT instance includes a transfer server that is used to provide the remote authenticator and an authentication server is used to provide the local domain authenticator.

14. The method of claim 13 , wherein the authentication server uses OpenText Directory Services (OTDS).

Assignments (5)
IP BUSINESS SALE AGREEMENT Recorded Aug 30, 2016
From: OPEN TEXT S.A.
To: OT IP SUB, LLC
Reel/Frame 039872/0605 →
CERTIFICATE OF AMALGAMATION Recorded Aug 30, 2016
From: IP OT SUB ULC
To: OPEN TEXT SA ULC
Reel/Frame 039872/0662 →
CERTIFICATE OF CONTINUANCE Recorded Aug 30, 2016
From: OT IP SUB, LLC
To: IP OT SUB ULC
Reel/Frame 039986/0689 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 20, 2016
From: DAJANI, ALADIN
To: OPEN TEXT S.A.
Reel/Frame 038330/0716 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 13, 2016
From: MATTHEWS, GLEN; CARROLL, JONATHAN
To: OPEN TEXT S.A.
Reel/Frame 038273/0912 →