Patent ID: 8955072
Filing Date: 2015-02-10
Classification: G06F,H04L

Abstract:
1. A method of authenticating a user to a service in a system having a connection broker, comprising: receiving an input of credentials of the user at a client computing device that communicates with the connection broker and the service over a network, wherein the connection broker is configured to manage connections to a plurality of resources and the service is running in one of the resources, and wherein the user credentials include a secret component; storing the secret component in the client computing device; authenticating the user to the client computing device, wherein the authentication of the user is performed by a domain controller based on at least a first encrypted version of the stored secret component which is transmitted from the client computing device to the domain controller; authenticating the connection broker to a client process which has access to the stored secret component; transmitting a second encrypted version of the secret component of the user credentials via the client process from the client computing device to the authenticated broker; in response to receiving the second encrypted version of the secret component at the authenticated broker: at the service, authenticating the user using the third encrypted version of the secret component of the user credentials forwarded by the authenticated broker.