Multi-protocol authentication and authorization in computer network environments
View Patent ↗A multi-protocol authentication and authorization system including a request interceptor configured to receive from a requestor a first request using a first transport protocol and a second request using a second transport protocol, and an authenticator for validating a digest received from the requestor, where the request interceptor is configured to authenticate the requestor if the digest is valid and if at least one multi-protocol criterion applied to the requests is met.
1. A multi-protocol authentication and authorization system comprising:
a request interceptor configured to receive from a requestor a first request using a first transport protocol and a second request using a second transport protocol, wherein said first transport protocol and said second transport protocol are different transport protocols; and
an authenticator for validating a digest received from said requestor,
wherein said request interceptor is configured to authenticate said requestor if said digest is valid,
and wherein said request interceptor is configured to authorize said requestor to access a requested application if
a first criterion is applied to said first request,
a second criterion is applied to said second request, and
all of said criteria are met.
2. A system according to claim 1 wherein said request interceptor is configured to constrain said requestor to one role in said requested application where said requests are made at different times not within a predefined time window, and a different role where said requests are made within a predefined time window.
3. A method for multi-protocol authentication and authorization, the method comprising:
receiving from a requestor a first request using a first transport protocol and a second request using a second transport protocol, wherein said first transport protocol and said second transport protocol are different transport protocols;
validating a digest received from said requestor;
authenticating said requestor if said digest is valid; and
authorizing said requestor to access a requested application if
a first criterion is applied to said first request,
a second criterion is applied to said second request, and
all of said criteria are met.
4. A method according to claim 3 wherein said authorizing step comprises constraining said requestor to one role in said requested application where said requests are made at different times not within a predefined time window, and a different role where said requests are made within a predefined time window.