Dynamic authentication and authorization mechanisms
AssigneeUnisys Corporation
InventorsShrinivas Alawani, Gurwinder Singh, Kumararaja Panneer Selvam
Life of this patent
Estimating the term…
Abstract
A computing system architecture includes a token generator communicable with a client token agent. The client token agent is communicable with a client database access agent. A database management system is communicable with the token agent. The database management system is communicable with the client database access agent. A client authorization management system is communicable with the database management system. The client authorization management system stores a list of authorized operations for a client. The list of authorized operations is configured to be changeable during a client login session.
Claims7
A computing system architecture, comprising:
- a token generator that generates a token upon receiving a request from a token agent on a client device and returns the token to the token agent;
- a database management system in communication with the token generator and receiving the token from the token generator, the database management system using the token to authenticate a user on the client device during a login session for access to the database management system;
- and
- a client authorization system in communication with the token generator and database management system and receiving the token from the token generator, the client authorization system using the token to allow authorization to operations on the database management system by the user, the client authorization system being configured to change allowed authorization to operations on the database management system during the login session without ending the login session;
- wherein the token is used both for authenticating the user and for authorizing operations by the user once authenticated during the login session;
- wherein the token includes a first portion generated based on an IP address, a second portion based on a time, a third portion based on a random text string, a fourth portion generated based on a random number, and fifth portion generated based on a database access agent.
Dependencies are inferred from the claim text.