Back to results
US 11,706,224 B2Granted
Entity authentication for pre-authenticated links
AssigneeMicrosoft Technology Licensing, LLC
InventorMuhammad Ali Malik
Life of this patent
Estimating the term…
Abstract
Techniques for increasing security for pre-authenticated links are disclosed herein. Computing systems that generate pre-authenticated links are configured to assign an entity identifier to pre-authenticated links to specify an entity permitted to access respective data through the pre-authenticated link. When activating a respective pre-authenticated link, an entity attaches an entity token to the request to prove an identity of the requesting entity. If the identity from the entity token matches the entity identifier, the computing system may grant access to the respective data.
Claims20
A method for enhancing security of pre-authenticated links for data content using one or more hardware processors, the method comprising:
- generating a pre-authenticated link activatable to gain access to data content stored by a computing system, wherein the pre-authenticated link includes a network address indicating a network location of the data content, a link credential that authenticates an access request for the data content made through activation of the pre-authenticated link;
- and an entity identifier that identifies an entity having permission to activate the pre-authenticated link to access the data content;
- receiving a first request for the data content from a first requesting entity generated through activation of the pre-authenticated link;
- receiving the link credential associated with the first request from the first requesting entity;
- receiving an entity token associated with the first request, wherein the entity token indicates an authenticated identity of the first requesting entity;
- granting access to the data content to the first requesting entity in response to:
- verifying that the link credential associated with the first request is valid;
- and
- verifying that the first requesting entity is authorized to access the data content by verifying that the authenticated identity specified by the entity token matches the entity identifier for the pre-authenticated link, the entity identifier specific to the pre-authenticated link and the authenticated identity;
- receiving a second request for the data content from a second requesting entity generated through activation of the pre-authenticated link;
- and
- denying access to the data content to the second requesting entity in response to a determination that the second requesting entity is not authorized to access the data content.
9 more elements
A system for enhancing security of pre-authenticated links for data content using one or more hardware processors, the system comprising:
- one or more hardware processors;
- and
- one or more memories, storing instructions, which when executed, cause the one or more hardware processors to perform operations comprising:
- generating a pre-authenticated link activatable to gain access to data content stored by a computing system, wherein the pre-authenticated link includes a network address indicating a network location of the data content, a link credential that authenticates an access request for the data content made through activation of the pre-authenticated link, and an entity identifier that identifies an entity having permission to activate the pre-authenticated link to access the data content;
- receiving a first request for the data content from a first requesting entity generated through activation of the pre-authenticated link;
- receiving the link credential associated with the first request from the first requesting entity;
- receiving an entity token associated with the first request, wherein the entity token indicates an authenticated identity of the first requesting entity;
- granting access to the data content to the first requesting entity in response to:
- verifying that the link credential associated with the first request is valid;
- and
- verifying that the first requesting entity is authorized to access the data content by verifying that the authenticated identity specified by the entity token matches the entity identifier for the pre-authenticated link, the entity identifier specific to the pre-authenticated link and the authenticated identity;
- receiving a second request for the data content from a second requesting entity generated through activation of the pre-authenticated link;
- and
- denying access to the data content to the second requesting entity in response to a determination that the second requesting entity is not authorized to access the data content.
11 more elements
A system for enhancing security of pre-authenticated links for data content using one or more hardware processors, the system comprising:
- means for generating a pre-authenticated link activatable to gain access to data content stored by a computing system, wherein the pre-authenticated link includes a network address indicating a network location of the data content, a link credential that authenticates an access request for the data content made through activation of the pre-authenticated link, and an entity identifier that identifies an entity having permission to activate the pre-authenticated link to access the data content;
- means for receiving a first request for the data content from a first requesting entity generated through activation of the pre-authenticated link;
- means for receiving the link credential associated with the first request from the first requesting entity;
- means for receiving an entity token associated with the first request, wherein the entity token indicates an authenticated identity of the first requesting entity;
- means for granting access to the data content to the first requesting entity in response to:
- verifying that the link credential associated with the first request is valid;
- and
- verifying that the first requesting entity is authorized to access the data content by verifying that the authenticated identity specified by the entity token matches the entity identifier for the pre-authenticated link, the entity identifier specific to the pre-authenticated link and the authenticated identity;
- means for receiving a second request for the data content from a second requesting entity generated through activation of the pre-authenticated link;
- and
- means for denying access to the data content to the second requesting entity in response to a determination that the second requesting entity is not authorized to access the data content.
8 more elements
Dependencies are inferred from the claim text.