US 11,388,158 B2 · System and method for authenticating clients

Abstract

A system is disclosed for authenticating a client's request for resources in a network environment. The system is configured to receive a request, the request comprising credentials and an API scope, authenticate the credentials, and confirm the API scope of the request is identified in one or more API scopes allocated to a client using an authorization server. The authorization server may comprise a relational database correlating one or more clients with one or more roles, the roles may be correlated with one or more permissions, and the permissions may be correlated with one or more API scopes. The system may be configured to request an access token, the access token comprising an API scope that correlates to the API scope of the request, and grant access to the requested resource if the API scope of the access token correlates to the API scope of the request.

Claims20

Dependent claims

A computer-implemented method comprising:

receiving a request for a resource of a plurality of resources, the request including at least an identifier, the identifier assigned one or more roles, each role assigned one or more permissions, each permission being mapped to one or more resources of the plurality of resources and at least one of the permissions including a right to install or configure an application associated with the resource;
requesting authentication of the request;
in response to receiving the authentication, requesting a token to permit access to the resource;
in response to receiving the token, requesting the resource using the token, wherein the token includes one or more resources accessible by the token;
and
in response to requesting the resource using the token, validating the token to confirm whether the one or more resources accessible by the token correlate to the resource of the request;
in response to validating the access token, granting the access to the resource.

4 more elements

A system comprising:

a processor;
and
a non-transitory computer-readable medium storing instructions that, when executed by the system, cause the system to:
receive a request for a resource of a plurality of resources, the request including at least an identifier, the identifier assigned one or more roles, each role assigned one or more permissions, each permission being mapped to one or more resources of the plurality of resources and at least one of the permissions including a right to install or configure an application associated with the resource;
request authentication of the request;
in response to receiving the authentication, request a token to permit access to the resource;
in response to receiving the token, request the resource using the token, wherein the token includes one or more resources accessible by the token;
in response to requesting the resource using the token, validating the token to confirm whether the one or more resources accessible by the token correlate to the resource of the request;
and
in response to validating the access token, grant the access to the resource.

7 more elements

Dependencies are inferred from the claim text.

System and method for authenticating clients

Life of this patent

System and method for authenticating clients

Life of this patent

Abstract

Claims20