Granular authorization for network user sessions
AssigneeMicrosoft Corporation
InventorShawn Domenic Loveland
Life of this patent
Estimating the term…
Loading patent…
AssigneeMicrosoft Corporation
InventorShawn Domenic Loveland
Estimating the term…
Providing access to a mobile user session in a manner that more closely corresponds access to network resources to the trustworthiness of authentication methods and devices associated with the mobile user session. Characteristics of authentication methods associated with a mobile user session are synthesized to generate an authentication bundle. Characteristics may include data associated with passwords, biometric data or devices used to execute an authentication method. By synthesizing characteristics in varied manners, a non-binary sliding scale of access to network resources may be generated. An authentication bundle may be accessed to grant a mobile user session appropriate access to network resources. Granting access may include generating an authorization token that is passed to a filter or reverse proxy. Access to network resources may be dynamically modified as authentication methods associated with a mobile user session change.
In a computing device including a security module that may grant a user session access to network resources, a method for granting a mobile user session access to network resources depending on one or more authentication methods and the security of one or more devices associated with the mobile user session so as to grant access that corresponds to the trustworthiness of the associated authentication methods and devices, the method comprising:
In a computing device including an access granting module that may grant a user session access to network resources, a method for granting a mobile user session access to network resources depending on one or more authentication methods and the security of one or more devices associated with the mobile user session so as to grant access that corresponds to the trustworthiness of the associated authentication methods and devices, the method comprising:
A computer program product for implementing, in a computing device including a security module that may grant a user session access to network resources, a method for granting a mobile user session access to network resources depending on one or more authentication methods and the security of one or more devices so as to grant access that corresponds to the trustworthiness of the associated authentication methods and devices, the computer program product comprising:
A computer program product for implementing, in a computing device including a security module that may grant a user session access to network resources, a method for granting a mobile user session access to network resources depending on one or more authentication methods and the security of one or more devices so as to grant access that corresponds to the trustworthiness of the associated authentication methods and devices, the computer program product comprising:
Dependencies are inferred from the claim text.