# US 11,122,044 B2 · Invalidation of an access token > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,044 B2 - Document ID: US11122044B2 - Status: Granted - Kind: B2 - Application number: 16/414,329 - Filed: 2019-05-16 - Published: 2019-09-12 - Granted: 2021-09-14 - Earliest claimed: 2016-10-18 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Miki Enoki; Rika Nagahara; Takahide Nogayama; Takashi Sakairi - Web page: https://patentgrep.com/patent/US11122044B2 ## CPC - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/0407: {wherein the identity of one or more communicating identities is hidden (cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A computer-implemented method for invalidating an access token includes generating an access token and an HTML file in response to receipt of a request for issuing the access token, the HTML file comprising a set of instructions for rendering on one window in a browser, a code for generating a child segment in a memory which is controlled by the window, and a code for invalidating the access token in response to completion of rendering on the child segment, in response to completion of receiving, from a resource server, one or more resources requested by a client program executed on the child segment or in response to closing of the window, sending the access token and the HTML file to the browser, and invalidating the access token, in response to receipt, from the browser, of a request for invalidating the access token. ## Claims ### Claim 1 A computer-implemented method for invalidating an access token, the method comprising: generating the access token for authorizing access to a protected online resource server; generating a Hyper Text Markup Language (HTML) file including: a code for generating child segments in a child window of a browser, the browser including a parent window and two or more child segments, and an invalidating code including a Uniform Resource Identifier (URI) for an authorization server; sending the access token and the HTML file to the browser; and invalidating the access token in response to receiving the invalidating code from the browser sent in response to completion of rendering on the two or more child segments. ### Claim 2 (depends on 1) The method according to claim 1, wherein the access token is issued using OAuth protocol. ### Claim 3 (depends on 1) The method according to claim 1, wherein the code for generating the child segment is one described using a program. ### Claim 4 (depends on 1) The method according to claim 1, wherein the browser is executed on a client device associated with a resource owner. ### Claim 5 (depends on 4) The method according to claim 4, wherein the browser has an authority from the resource owner. ### Claim 6 (depends on 1) The method according to claim 1, wherein the child segment has a display section for the child segment and a result of execution of a client program is displayed on the display section. ### Claim 7 (depends on 6) The method according to claim 6, wherein one or more resources requested by the client program are received, from a resource server, at the client program. ### Claim 8 (depends on 1) The method according to claim 1, wherein generating the access token, sending the access token and invalidating the access token are executed on an authorization server. ### Claim 9 A computer program product for invalidating an access token, the computer program product comprising a non-transitory computer usable storage medium having program instructions embodied therewith, the program instructions executable by a computer to cause the computer to perform a method comprising: generating the access token for authorizing access to a protected online resource server; generating a Hyper Text Markup Language (HTML) file including: a code for generating child segments in a child window of a browser, the browser including a parent window and two or more child segments; an invalidating code including a Uniform Resource Identifier (URI) for an authorization server; sending the access token and the HTML file to a browser; and invalidating the access token in response to receiving the invalidating code from the browser sent in response to completion rendering on the two or more child segments. ### Claim 10 (depends on 9) The computer program product according to claim 9, wherein the access token is issued using OAuth protocol. ### Claim 11 (depends on 9) The computer program product according to claim 9, wherein the code for generating the child segment is one described using a program. ### Claim 12 (depends on 9) The computer program product according to claim 9, wherein the browser is executed on a client device associated with a resource owner. ### Claim 13 (depends on 12) The computer program product according to claim 12, wherein the browser has an authority from the resource owner. ### Claim 14 (depends on 9) The computer program product according to claim 9, wherein the child segment has a display section for the child segment. ### Claim 15 (depends on 9) The computer program product according to claim 9, wherein generating the access token, sending the access token and invalidating the access token are executed on an authorization server. ### Claim 16 (depends on 9) The computer program product according to claim 9, wherein the client-side action includes receiving, from the resource server, one or more resources requested by a client program executed on the child segment. ### Claim 17 (depends on 9) The computer program product according to claim 9, wherein the client-side action includes closing the window of the browser. ### Claim 18 A system, comprising: a memory storing a program which, when executed on a processor, performs a method for invalidating an access token, the method comprising: generating the access token for authorizing access to a protected online resource server; generating a Hyper Text Markup Language (HTML) file including: a code for generating child segments in a child window of a browser, the browser including a parent window and two or more child segments, and an invalidating code including a Uniform Resource Identifier (URI) for an authorization server; sending the access token and the HTML file to the browser; and invalidating the access token, in response to receiving the invalidating code from the browser sent in response to completion of rendering on the two or more child segments. ### Claim 19 (depends on 18) The system according to claim 18, wherein the access token is issued using OAuth protocol.