Secure messaging facility system
A secure message facility transfers authentication data between various applications, operating systems, and authentication devices and software in the form of messages. These messages comprise a data structure with a standard header with fields that describe the class, length, and type of message, and routing information. This header information is used to route the message to the appropriate handler. The messages are transferred between applications via the messaging facility DLL and the messaging facility Service. The messaging facility DLL is intended to be loaded by an application. The messaging facility DLL forms the messages, directs them to the appropriate messaging facility service (local or remote) and interprets the responses. The messages sent between the messaging facility DLL and messaging facility Service are extremely flexible and can be used to send any type of data or content of messages.
1. A system for transferring user authentication data, from an origin to a destination, comprising:
a user authentication server including a remote messaging facility service;
a user authentication device configured to sense user input and derive user authentication data;
a user computer communicatively coupled to the user authentication server and the user authentication device, and comprising:
an application software module;
a local messaging facility service in communication with the application software module, the local messaging facility service comprising:
a plurality of dynamically-linked libraries (DLL) with at least one DLL of the plurality of DLLs initialized within the application software module;
a mapping layer to coordinate communication among the plurality of DLLs:
a plurality of message handlers to process messages from the plurality of DLLs, wherein at least a portion of the message handlers use a message class included in a message to determine which of the portion of the message handlers are to handle the message;
an interface to a transport mechanism to communicate with remote message facility services; and
a driver interface to communicate with the user authentication device;
wherein a DLL of the plurality of DLLs is configured to:
provide a communication bridge between the application software module and the local messaging facility service;
obtain user authentication data from the user authentication device via either the application software module or the driver interface;
create a secure message that includes the user authentication data; and
transmit the secure message to the local messaging facility service, and wherein the local messaging facility service is configured to:
receive the secure message from the DLL using a message handler from the plurality of message handlers;
determine by the message handler the that the remote messaging facility service is a destination of the secure message based on destination information in the secure message; and
route the secure message to the remote messaging facility service using the transport mechanism.
2. The system of claim 1 , wherein said origin and said destination are each selected from a list consisting of local application software, remote application software, operating system, network software, local driver, remote driver, local authentication device and remote authentication device.
3. The system of claim 1 , wherein said user authentication device is selected from the list consisting of tokens, SecurID, proximity devices, biometric authentication devices, fingerprint scanner, body feature scanner, body feature sensor, sound recorder, and voice recognition device.
4. The system of claim 1 , wherein said DLL is compatible with Microsoft Windows NT/2000/2003/XP based 32 bit and 64 bit operating systems.
5. The system of claim 1 , wherein said DLL is compatible with non-Microsoft Windows NT/2000-2003/XP based operating systems.
6. The system of claim 1 , wherein said DLL functions when the user is attached to a domain.
7. The system of claim 1 , wherein said DLL functions when the user is not attached to a domain.
8. The system of claim 1 , further comprising a software developer's kit with an application programming interface to said software.
9. The system of claim 1 , wherein at least one of said origin and said destination is located remotely, and remote communication is accomplished under TCP/IP.
10. A method of transferring user authentication data from an origin to a destination comprising:
providing a DLL which creates a message which includes the user authentication data obtained from a user authentication device at the origin, and a destination information description indicating the destination of the message, wherein the DLL is associated with a local messaging facility service, the local messaging facility service comprising:
a plurality of dynamically-linked libraries (DLL) including the DLL;
a mapping layer to coordinate communication among the plurality of DLLs;
a plurality of message handlers to process messages from the plurality of DLLs, wherein at least a portion of the message handlers use a message class included in a message to determine which of the portion of the message handlers are to handle the message;
an interface to a transport mechanism to communicate with remote message facility services; and
a driver interface to communicate with the user authentication device; and
transferring the message from the origin to the destination using the DLL by:
creating a secure message that includes the user authentication data; and
transmitting the secure message to the local messaging facility service;
receiving the secure message at the local messaging facility service from the DLL using a message handler from the plurality of message handlers;
determining by the message handler the destination is an authentication server having a remote messaging facility service based on destination information in the secure message; and
routing the secure message to the remote messaging facility service using the transport mechanism.
11. The method of claim 10 , wherein the transferring of the message utilizes TCP/IP.
12. The method of claim 10 , wherein said origin and said destination are each selected from a list consisting of local application software, remote application software, operating system, network software, local driver, remote driver, local authentication device and remote authentication device.
13. The method of claim 10 , wherein said user authentication device is selected from the list consisting of tokens, SecurID, proximity devices, biometric authentication devices, fingerprint scanner, body feature scanner, body feature sensor, sound recorder, and voice recognition device.