Patent ID: 9692744
Date: 2017-06-27
CPC Classifications: H04L

Claim:
1. A method for secure user authentication in a network having a dynamic set of services, the method comprising: a hardware client computer authenticating with an edge service by authenticating with an Authentication Server (AS) that provides a first ticket allowing the hardware client computer to authenticate with a Ticket Granting Service (TGS), wherein the TGS provides a second ticket allowing the hardware client computer to authenticate with the edge service; the hardware client computer generating a query key using a one way function of a portion of the first ticket provided by the AS to allow the hardware client computer to authenticate with the TGS; an authentication hardware server that authenticates an edge service that issues a request to the dynamic set of services, the request comprising: a hardware network having a dynamic set of services, wherein one or more of said dynamic set of services, in response to ascertaining from said public portion of the request that the one or more of said dynamic set of services is able to respond to the request, respond to the edge service with (i) an identifier associated with the one or more of said dynamic set of services, and (ii) the identifier associated with the hardware client computer, wherein the identifier associated with the hardware client computer is encrypted with the query key; wherein the edge service authenticates with the one or more of said dynamic set of services that the edge service is able to respond to the request by authenticating with the AS, wherein the AS provides a third ticket allowing the edge service to authenticate with the TGS, wherein the TGS provides a fourth ticket allowing a single service to authenticate with one or more of said dynamic set of services, wherein the edge service generates a session key using a one way function of a portion of the third ticket provided by the AS to allow the edge service to authenticate with the TGS; and wherein the edge service sends the query key, to said one or more of said dynamic set of services, encrypted using the session key; and accessing, by one or more processors, a specific service from said one or more of the dynamic set of services by traversing through multiple intermediary services in order to reach the specific service, wherein at least one service from said multiple intermediary services provides access to the query key.