Patent ID: 8156546
Filing Date: 2012-04-10
Classification: G06F,H04L

Abstract:
1. A method for re-authenticating a user of an enterprise system during a session to support a single signon mechanism at a plurality of scheduled re-authentication times and to send an authentication message to said enterprise system, wherein said enterprise system is associated with a plurality of applications, said method comprising: selecting a plurality of name fields associated with said plurality of applications, wherein said selection is based on a plurality of fields associated with said plurality of applications, and a plurality of properties associated with a field of said plurality fields comprising common-ness, importance, confidentiality, and numerical-ness; selecting a plurality of value fields associated with said plurality of applications, wherein aid selection is based on said plurality of fields, and a plurality of properties associated with a field of said plurality of fields; selecting a plurality of messages comprising a plurality of application messages associated with said plurality of applications and a plurality of system messages, wherein said selection is based on a plurality of application messages associated with said plurality of applications, and a plurality of properties associated with a message of said plurality applications; instrumenting of said plurality of applications so as to display said plurality of name fields, said plurality of value fields, and said plurality of messages in a manner so as to draw the attention of said user during the interactions with said applications during said session; randomly selecting a plurality of user specific name fields based on said plurality of name fields and a plurality of most accessed applications of said plurality of applications, wherein a most accessed application of said plurality of most accessed applications is most frequently accessed by said user; randomly selecting of a plurality of user specific value fields based on said plurality of value fields and said plurality of most accessed applications; randomly selecting of a plurality of user specific messages based on said plurality of messages and said plurality of most accessed applications; updating of a w3-info table, a p3-info table, and a m3-info table based on interactions of said user during said session; re-authentication scheduling based on a last re-authentication time (R identifying a plurality of w3-entities randomly based on said w3-info table, wherein a time to live value of each of said plurality of w-entities exceeds zero; identifying a plurality of p3-entities based on said p3-info table, wherein a time to live value of each of said plurality of p-entities exceeds zero; identifying a plurality of m3-entities based on said m3-info table, wherein a time to live value of each of said plurality of m-entities exceeds zero; selecting a random number of w-entities from said plurality of w3-entities; making said random number of w-entities as a plurality of entities of a source bag; selecting a random number of p-entities from said plurality of p3-entities; making said random number of p-entities as a plurality of entities of said source bag; selecting a random number of m-entities from said plurality of m3-entities; making said random number of m-entities as a plurality of entities of said source bag; point displaying said source bag and a destination bag, wherein as many of a plurality of entities of said source bag get displayed; point filling in said destination bag based on said source bag and a plurality of responses provided by said user; point re-authenticating said user based on said destination bag generating said authentication message; line displaying said source bag and a destination line, wherein said destination line comprises of a plurality of line bins; line filling in said destination line based on said source bag and a plurality of responses provided by said user; line re-authenticating said user based on said destination line generating said authentication message; plane displaying said source bag and a destination plane, wherein said destination plane comprises of a plurality of plane bins; plane filling in said destination line based on said source bag and a plurality of responses provided by said user; plane re-authenticating said user based on said destination plane generating said authentication message; cube displaying said source bag and a destination cube, wherein said destination cube comprises of a plurality of cube bins and is based on a cube dimensionality comprising of time, location, and device; cube filling in said destination line based on said source bag and a plurality of responses provided by said user; and cube re-authenticating said user based on said destination cube generating said authentication message.