System and method for managing access to a plurality of servers in an organization

Patent metadata

Field	Value
Publication number	US-8959613-B2
Application number	US-48738009-A
Country	US
Kind code	B2
Filing date	Jun 18, 2009
Priority date	Jun 18, 2009
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

A system for managing access to resources in a plurality of servers by a plurality of client computers by using an operating system independent Secure Shell (SSH) protocol running in each server and using a central policy database that centrally stores access rules which specify access to the servers for a plurality of users/accounts. Each time a target server receives a user request to establish an SSH session, it retrieves associated access rules from the central policy database to obtain the latest access rules. Based on the retrieved rules and the identity of the user and the identity of the client computer, the target server determines whether the user has permission to establish the SSH session with the target server. Using a centralized database and requiring the servers to always retrieve the latest access rules from a central database provides consistent application of the access rules across all servers and all client computers.

First claim

What is claimed is:

1. A system for managing access to a plurality of servers each executing an operating system independent Secure Shell (SSH) protocol, the system comprising:
a central policy database in communication with the plurality of servers and centrally storing a plurality of access rules that specify access to the servers for a plurality of users using the SSH protocol;
an access control module executable by each of the servers and adapted to:
receive, from a client…

Assignees

• Goel Varun
• Walsh Robert
• Visa Usa Inc

Inventors

• Goel Varun
• Walsh Robert

Classifications

• H04L63/102 Primary

  Electricity · mapped topic