Privacy-aware ID gateway
AssigneeInternational Business Machines Corporation
InventorsMiki Ishikawa, Yuji Watanabe
Life of this patent
Estimating the term…
Abstract
A method includes, for a first user having been authenticated on a first application with a first user identification (ID) using a first ID federation between the first application and a federation server, determining that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being associated with a second user ID, and sending a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.
Claims20
A method comprising:
- for a first user having been authenticated on a first application with a first user identification (ID) using a first ID federation between the first application and a federation server, determining that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being different from the first user and being associated with a second user ID obtained based on the first user ID;
- and
- sending a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.
A method comprising:
- receiving, from a first application, a first authentication request for authenticating a first user, the first user having been authenticated on the first application with a first user identification (ID) using a first ID federation between the first application and a federation server;
- determining that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being different from the first user and being associated with a second user ID obtained based on the first user ID;
- and
- sending a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.
A method comprising:
- receiving, from a first application, a first authentication request for authenticating a first user, the first user having been authenticated on the first application with a first user identification (ID) using a first ID federation between the first application and a federation server;
- determining that the first user is authorized to access information of a second user on a second application based on the first user ID, the second user being different from the first user and being associated with a second user ID obtained based on the first user ID, including:
- obtaining condition information defining a condition;
- and
- determining that the first user ID, the second application and the second user ID satisfy the condition;
- and
- sending a second authentication request for authenticating the first user to the second application with the second user ID using a second ID federation between the federation server and the second application.
Dependencies are inferred from the claim text.