Single login authentication for users with multiple IPV4/IPV6 addresses

Patent metadata

Field	Value
Publication number	US-9973490-B2
Application number	US-201615290841-A
Country	US
Kind code	B2
Filing date	Oct 11, 2016
Priority date	Aug 29, 2014
Publication date	May 15, 2018
Grant date	May 15, 2018

Abstract

Disclosed in the authentication and authorization of a client device to access a plurality of resources, requiring a user of a client device to enter only one set of login information. Authentication and authorization of a client device to access a plurality of resources after an initial set of login information is received by a networked computing environment. After the initial set of login information is received, a series of steps are performed that may be entirely transparent to the user of the client device.

First claim

What is claimed is:

1. A method for authenticating user credentials, the method comprising:
receiving a first authorization request and a second authorization request sent from a client device, wherein the first authorization request requests authorization to access a first group of resources that are associated with a first server internet protocol (IP) address compatible with a first IP version, and wherein the second authorization request requests authorization to access a second group of resources that are associated with a second server IP address compatible with a second IP version;
receiving a set of login information from the client device; and
authenticating the client device based on the set of login information received from the client device, wherein the client device is authenticated to access the first group of resources and the second group of resources via a single authentication process, and wherein the client device accesses the first group of resources according to the first IP version and accesses the second group of resources according to the second IP version based the single authentication process without requiring another authentication process.

2. The method of claim 1 , wherein a gateway intercepts and forwards the first authentication request and the second authentication request to a login server.

3. The method of claim 1 , wherein a server not associated with the first IP address or with the second IP address intercepts the first and the second authentication request.

4. The method of claim 3 , wherein the server is a login server.

5. The method of claim 1 , wherein the first server IP address is associated with a first server, and the second server IP address is associated with a second server.

6. The method of claim 1 , wherein the first IP version is the IP version 4 (IPV4) and the second IP version is the IP version 6 (IPV6).

7. The method of claim 1 , wherein the first IP address and the second IP address are each associated with different predetermined ranges of IP addresses.

8. The method of claim 1 , wherein the first IP address and the second IP address are both associated with a first server.

9. The non-transitory computer readable storage medium of claim 8 , wherein the first server IP address is associated with a first server, and the second server IP address is associated with a second server.

10. A non-transitory computer readable storage medium having embodied thereon a program executable by a processor for implementing a method for authenticating user credentials, the method comprising:
receiving a first authorization request and a second authorization request sent from a client device, wherein the first authorization request requests authorization to access a first group of resources that are associated with a first server internet protocol (IP) address compatible with a first IP version, and wherein the second authorization request requests authorization to access a second group of resources that are associated with a second server IP address compatible with a second IP version;
receiving a set of login information from the client device; and
authenticating the client device based on the set of login information received from the client device, wherein the client device is authenticated to access the first group of resources and the second group of resources via a single authentication process, and wherein the client device accesses the first group of resources according to the first IP version and accesses the second group of resources according to the second IP version based the single authentication process without requiring another authentication process.

11. The non-transitory computer readable storage medium of claim 10 , wherein a gateway intercepts and forwards the first authentication request and the second authentication request to a login server.

12. The non-transitory computer readable storage medium of claim 11 , wherein a server not associated with the first IP address or with the second IP address intercepts the first and the second authentication request.

13. The non-transitory computer readable storage medium of claim 12 , wherein the server is a login server.

14. The non-transitory computer readable storage medium of claim 10 , wherein the first IP version is the IP version 4 (IPV4) and the second IP version is the IP version 6 (IPV6).

15. The non-transitory computer readable storage medium of claim 10 , wherein the first IP address and the second IP address are each associated with different predetermined ranges of IP addresses.

16. The non-transitory computer readable storage medium of claim 10 , wherein the first IP address and the second IP address are both associated with a first server.

17. A system for authenticating user credentials, the system comprising:
one or more host computers that host a first group of resources associated with a first server IP address compatible with a first IP version and a second group of resources associated with a second server IP address compatible with a second IP version; and
a login server comprising:
a network interface that communicates over a communication network with the client device, wherein the network interface:
receives a first authorization request regarding access the first group of resources,
receives a second authorization request regarding access the second group of resources, and
a set of login information;

a processor that executes instructions stored in memory, wherein execution of the instructions by the processor authenticates the client device based on the set of login information received from the client device, wherein the client device is authenticated to access the first group of resources and to access the second group of resources via a single authentication process, and wherein the client device accesses the first group of resources according to the first IP version and accesses the second group of resources according to the second IP version based the single authentication process without requiring another authentication process.

18. The system of claim 17 , further comprising a first server and a second server, wherein the first server IP address is associated with the first server, and the second server IP address is associated with the second server.

19. The system of claim 17 , further comprising a first server, wherein the first IP address and the second IP address are associated with the first server.

20. The system of claim 17 , wherein the first IP version is the IP version 4 (IPV4) and the second IP version is the IP version 6 (IPV6).

Assignees

• Sonicwall Us Holdings Inc
• Sonicwall Inc

Inventors

• Huang xiao yu
• Chen Zhong
• Hu Yi Fei
• Cai Riji

Classifications

• H04L63/0815 Primary

  providing single-sign-on or federations · CPC title

• H04L67/42

  Electricity · mapped topic

• H04L61/2007

  Electricity · mapped topic

• H04L61/5007

  Internet protocol [IP] addresses · CPC title

• H04L63/102

  Entity profiles · CPC title