Granted Patent B2

US 12,423,454 · App. 18/496,429 · Granted Sep 23, 2025

Inventors: Manav Ratan Mital (Mountain View, CA); Srinivas Nageswarrao Vadlamani (San Jose, CA)

Assignee: Cyral Inc.

G06F21/6218G06F11/3006G06F11/3438G06F11/3476G06F16/24547G06F21/31G06F21/604G06F21/6227G06F21/6254H04L63/0281H04L63/0884H04L63/101H04L63/102H04L63/104H04L63/105H04L63/1425H04L63/166H04L63/168H04L69/326H04L69/329G06F2221/2107H04L2463/082

Abstract

Claims (61)

1. A method, comprising:

receiving, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic;

providing the communication from the dispatcher to the service;

determining, using the service, whether the client is authorized to access the data source utilizing multi-factor authentication (MFA); and

preventing access to the data source if the success indication indicates that the authentication is unsuccessful.

2. The method of claim 1 , wherein the determining further includes:

calling, by the service, an MFA utility; and

receiving, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful.

3. The method of claim 2 , wherein the MFA utility is a third-party MFA utility.

4. The method of claim 1 , wherein the preventing access further includes:

providing the communication to the data source from the dispatcher; and

recalling the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

5. The method of claim 1 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, the preventing access further including:

providing the first communication to the service without forwarding the first communication to the data source; and wherein the preventing access further includes

preventing access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forwarding the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

placing the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receiving at least one additional communication from the client at the dispatcher; and

automatically forwarding the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.

6. The method of claim 1 , wherein the dispatcher is an open systems interconnection (OSI) Layer 4 dispatcher and wherein the at least one service includes at least one OSI Layer 7 service.

7. A system, comprising:

a processor configured to:

receive, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic;

provide the communication from the dispatcher to the service;

determine, using the service, whether the client is authorized to access the data source utilizing multi-factor authentication (MFA); and

prevent access to the data source if the success indication indicates that the authentication is unsuccessful; and

a memory coupled to the processor and configured to provide the processor with instructions.

8. The system of claim 7 , wherein to determine, the processor is further configured to:

call, using the service, an MFA utility; and

receive, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful.

9. The system of claim 8 , wherein the MFA utility is a third-party MFA utility.

10. The system of claim 7 , wherein to prevent access, the processor is further configured to:

provide the communication to the data source from the dispatcher; and

recall the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

11. The system of claim 7 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, wherein to prevent access the processor is further configured to:

provide the first communication to the service without forwarding the first communication to the data source; and wherein the preventing access further includes

prevent access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forward the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

place the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receive at least one additional communication from the client at the dispatcher; and

automatically forward the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.

12. The system of claim 7 , wherein the dispatcher is an open systems interconnection (OSI) Layer 4 dispatcher and wherein the at least one service includes at least one OSI Layer 7 service.

13. A computer program product, the computer program product being embodied in a tangible computer readable storage medium and comprising computer instructions for:

receiving, from a client, a communication for a data source at a wrapper, the wrapper including a dispatcher and a service, the dispatcher receiving the communication and being data agnostic;

providing the communication from the dispatcher to the service;

determining, using the service, whether the client is authorized to access the data source utilizing multi-factor authentication (MFA); and

preventing access to the data source if the success indication indicates that the authentication is unsuccessful.

14. The computer program product of claim 13 , wherein the computer instructions for determining further include computer instructions for:

calling, by the service, an MFA utility; and

receiving, from the MFA utility, a success indication indicating whether authentication by the MFA utility is successful.

15. The computer program product of claim 14 , wherein the MFA utility is a third-party MFA utility.

16. The computer program product of claim 13 , wherein the computer instructions for preventing access further include computer instructions for:

providing the communication to the data source from the dispatcher; and

recalling the communication before processing by the data source if the success indication indicates that the authentication is unsuccessful.

17. The computer program product of claim 13 , wherein the communication includes a first communication, wherein the dispatcher is in a step mode for the first communication, the computer instructions for preventing access further including computer instructions for:

providing the first communication to the service without forwarding the first communication to the data source; and wherein the preventing access further includes

preventing access to the data source by terminating a connection to the client if the success indication indicates that the authentication is unsuccessful;

forwarding the first communication from the dispatcher to the data source if the success indication indicates that the authentication is successful;

placing the dispatcher in a stream mode if the success indication indicates that the authentication is successful;

receiving at least one additional communication from the client at the dispatcher; and

automatically forwarding the at least one additional communication from the dispatcher to the data source if the success indication indicates that the authentication is successful.

Assignments (1)

Continuity (6)

References Cited (284)