METHOD AND APPARATUS FOR PROVIDING AN AUTHENTICATION CONTEXT-BASED SESSION

摘要

An approach is provided for providing separation of authentication protocols and/or authentication contexts for client-server and server-server communication in network communication. A proxy server receives a request to initiate a service session. The request includes a first authentication context. The proxy server request verification of the first authentication context from an authentication server and validates the first authentication context based, at least in part, on the verification. The proxy server implements a second authentication context based, at least in part, on the verification of the first authentication context to initiate the service session.

主权项

1. A method comprising:
receiving a request from a client to initiate a service session, wherein the request includes a first authentication context determined by an authentication server; requesting verification of the first authentication context from the authentication server; validating the first authentication context based, at least in part, on a verification response; implementing a second authentication context based, at least in part, on the verification response of the first authentication context to initiate the service session; receiving another request from the client to retrieve data over the service session; authenticating the another request from the client using the second authentication context; and initiating retrieval of the data over the service session from another server using the first authentication context.