Michael V Browne

US Patent:

8220032, Jul 10, 2012

Filed:

Jan 29, 2008

Appl. No.:

12/021559

Inventors:

Robert J. Brenneman - Stormville NY, US
Michael E. Browne - Staatsburg NY, US
William J. Huie - Poughkeepsie NY, US
Sarah J. Sheppard - Poughkeepsie NY, US
Kyle M. Smith - Poughkeepsie NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/06

US Classification:

726 3, 726 2, 726 4, 726 5, 726 9, 726 26, 726 27, 726 29, 705 64, 705 65, 709223, 709225

Abstract:

Using an authentication server to discover one or more additional authentication servers and to dynamically establish a trust relationship with the one or more additional authentication servers. The authentication server searches for the one or more additional authentication servers to discover one or more sources of authentication tokens, and inspects an incoming authentication request from the one or more additional authentication servers to determine if the request is carrying one or more authentication tokens from a newly discovered realm. Once the authentication server determines a newly discovered realm to be trustworthy, the authentication server receives a directory schema from the newly discovered realm and compares the received directory schema with a known directory schema retrieved by the authentication server to identify an intersection of the received directory schema and the known directory schema. The authentication server uses the intersection to identify a primary key, and to identify any unique information that is specific to either the authentication server or the newly discovered realm.

US Patent:

20090187962, Jul 23, 2009

Filed:

Jan 17, 2008

Appl. No.:

12/015587

Inventors:

Robert J. Brenneman - Stormville NY, US
Michael E. Browne - Staatsburg NY, US
William J. Huie - Poughkeepsie NY, US
Sarah J. Sheppard - Poughkeepsie NY, US
Kyle M. Smith - Melrose MA, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 21/00
H04L 9/32
G06F 17/00

US Classification:

726 1, 726 5

Abstract:

Embodiments of the invention include methods for providing policy-driven, adaptive, multi-factor authentication procedures. A pool of potential authentication challenges is defined. Each of the potential authentication challenges is assigned a category and a weighted difficulty level. One or more authentication challenges are selected from the pool of potential authentication challenges using one or more security policies that are based upon the assigned category and the assigned weighted difficulty level, wherein a quantity of authentication challenges is determined using the one or more security policies. One or more historical access patterns are utilized in conjunction with the selected one or more authentication challenges to authenticate a user, wherein the historical access patterns include at least one of an access time or an access location. One or more dummy challenges are used to authenticate the user.