US 11,956,228 B2
Method and apparatus for securely managing computer process access to network resources through delegated system credentials
Nathaniel Wayne Yocom, North Bend, WA (US); and Sek-Hon Albert Leung, Los Altos, CA (US)
Assigned to DELINEA INC., Redwood City, CA (US)
Filed by DELINEA INC., Redwood City, CA (US)
Filed on Apr. 26, 2023, as Appl. No. 18/307,596.
Application 18/307,596 is a continuation of application No. 17/244,192, filed on Apr. 29, 2021, granted, now 11,706,209.
Prior Publication US 2023/0262052 A1, Aug. 17, 2023
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/083 (2013.01) 17 Claims
OG exemplary drawing
 
1. A system comprising:
a network resource server including an administration module, an authentication service, a token management module and an enrollment and policy module;
a plurality of machines communicatively coupled to said network resource server, each said machine including a plurality of autonomous computer processes configured to request resource access from said network resource server, a token module, and an agent;
wherein said network resource server and said plurality of machines comprise one or more processors, and executable code stored on a non-transitory computer-readable storage media and executed by the one or more processors;
wherein said agent in each of said plurality of machines is configured to enroll a corresponding one of said plurality of machines with said network resource server, and accept machine policies and login credentials from said enrollment and policy module, and after one of said plurality of machines is enrolled with said network resource server, if said token module does not know what resource scopes are available on the one machine, the token module issues a request to said agent on the one machine for available resource scopes and the agent returns a list of available resource scopes to the token module;
wherein the token module determines an available one of said resource scopes that contains a resource for which access is requested by one of said autonomous computer processes running on said one of said plurality of machines;
said token module requests from said agent an access token for the available one resource scope.