초록 ▼

A system and method provide transparent access from any system entry service to multiple account management services, and particularly to multiple authentication services on a computer system, supporting unified login and logout. Transparency between system entry services and account management serv

A system and method provide transparent access from any system entry service to multiple account management services, and particularly to multiple authentication services on a computer system, supporting unified login and logout. Transparency between system entry services and account management services, including authentication, password, account, and session services, is provided by an application programming interface and a configuration file. The configuration file stores associations between system entry services, and selected account management services, and allows an individual system entry service to be associated with multiple different ones of a given type of account management service, such as authentication services. The application programming interface determines dynamically in response to a request by a system entry service for an account management operation, such as authentication of a user, which account management service is associated with the system entry service by reading the configuration file and queuing pathnames stored therein of the account management services associated with the system entry service currently connecting user to the system. The application programming interface then invokes the queued pathnames for the desired operation. Multiple login is provided by encrypting authentication tokens used by the authentication services associated with a given system entry service with a primary authentication token of one of the authentication services, and subsequently decrypting the encrypted tokens as needed to authenticate the user. With unified login, the user need only provide the primary authentication token. Unified logout is provided by locating and destroying credentials of the user created by the multiple authentication services in response to a request of the valid user to logout.

대표청구항 ▼

[ We claim:] [1.] A computer system providing multiple account management services to a user connecting to the computer system with a first system entry service, comprising:at least one system entry service, each system entry service providing a method to connect a user to the computer system during

[ We claim:] [1.] A computer system providing multiple account management services to a user connecting to the computer system with a first system entry service, comprising:at least one system entry service, each system entry service providing a method to connect a user to the computer system during a session;at least one account management service comprising a plurality of operations for managing user specific account data for users of the computer system;a storage facility having a plurality of services associations, each service association identifying a system entry service and at least one account management service; and,an application programming interface mediating between the system entry services and the account management services, the application programming interface providing a plurality of API methods, each API method invoking at least one operation of at least one selected account management service in response to an invocation of the application programming interface to provide the operation, the application programming interface determining from the storage facility the at least one selected account management service associated with a selected system entry service used to connect the user to the computer system.