# US 2010/0169952 A1 · Method, apparatus and computer program product for providing an adaptive authentication session validity time > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2010/0169952 A1 - Document ID: US20100169952A1 - Status: Published application - Kind: A1 - Application number: 12/345,993 - Filed: 2008-12-30 - Published: 2010-07-01 - Earliest claimed: 2008-12-30 - Inventors: Jussi Maki; Markku Kontio - Web page: https://patentgrep.com/patent/US20100169952A1 ## CPC - H04L 63/0846: {using time-dependent-passwords, e.g. periodically changing passwords} - H04L 9/3213: {using tickets or tokens, e.g. Kerberos (network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807)} - H04L 9/3297: {involving time stamps, e.g. generation of time stamps} - H04L 63/068: {using time-dependent keys, e.g. periodically changing keys (cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088)} - H04L 2209/608: Watermarking - H04L 2209/80: Wireless - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract An apparatus for providing an adaptive authentication session validity time period may include a processor. The processor may be configured to receive an indication of load parameters indicative of authentication rate information, determine, at the service platform, a value defining a validity period for indicating a period of time during which an authentication session validity object is valid based on the received indication of load parameters, and provide the authentication session validity object to a client device. A corresponding method and computer program product are also provided. ## Claims ### Claim 1 A method comprising: receiving an indication of load parameters indicative of authentication rate information; determining a value defining a validity period for indicating a period of time during which an authentication session validity object is valid based on the received indication of load parameters; and providing the authentication session validity object to a client device. ### Claim 2 (depends on 1) The method of claim 1, wherein receiving the indication of load parameters comprises receiving re-authentication rate information associated with devices requesting issuance of a subsequent authentication session validity object. ### Claim 3 (depends on 1) The method of claim 1, wherein receiving the indication of load parameters comprises receiving an indication that an authentication rate has reached a threshold value. ### Claim 4 (depends on 3) The method of claim 3, wherein determining the value comprises selecting a modified validity period that increases the value in response to a upper limit threshold value being reached and decreases the value in response to a lower limit threshold value being reached. ### Claim 5 (depends on 1) The method of claim 1, wherein receiving the indication of load parameters comprises receiving historical data on past authentication rate information. ### Claim 6 (depends on 5) The method of claim 5, wherein determining the value comprises selecting the value to mitigate predicted peaks and valleys in authentication rates based on the historical data. ### Claim 7 A computer program product comprising at least one computer-readable storage medium having computer-executable program code instructions stored therein, the computer-executable program code instructions comprising: program code instructions for receiving an indication of load parameters indicative of authentication rate information; program code instructions for determining a value defining a validity period for indicating a period of time during which an authentication session validity object is valid based on the received indication of load parameters; and program code instructions for providing the authentication session validity object to a client device. ### Claim 8 (depends on 7) The computer program product of claim 7, wherein program code instructions for receiving the indication of load parameters include instructions for receiving re-authentication rate information associated with devices requesting issuance of a subsequent authentication session validity object. ### Claim 9 (depends on 7) The computer program product of claim 7, wherein program code instructions for receiving the indication of load parameters include instructions for receiving an indication that an authentication rate has reached a threshold value. ### Claim 10 (depends on 9) The computer program product of claim 9, wherein program code instructions for determining the value include instructions for selecting a modified validity period that increases the value in response to a upper limit threshold value being reached and decreases the value in response to a lower limit threshold value being reached. ### Claim 11 (depends on 7) The computer program product of claim 7, wherein program code instructions for receiving the indication of load parameters include instructions for receiving historical data on past authentication rate information. ### Claim 12 (depends on 11) The computer program product of claim 11, wherein program code instructions for determining the value include instructions for selecting the value to mitigate predicted peaks and valleys in authentication rates based on the historical data. ### Claim 13 An apparatus comprising a processor configured to: receive an indication of load parameters indicative of authentication rate information; determine a value defining a validity period for indicating a period of time during which an authentication session validity object is valid based on the received indication of load parameters; and provide the authentication session validity object to a client device. ### Claim 14 (depends on 13) The apparatus of claim 13, wherein the processor is configured to receive the indication of load parameters by receiving re-authentication rate information associated with devices requesting issuance of a subsequent authentication session validity object. ### Claim 15 (depends on 13) The apparatus of claim 13, wherein the processor is configured to receive the indication of load parameters by receiving an indication that an authentication rate has reached a threshold value. ### Claim 16 (depends on 15) The apparatus of claim 15, wherein the processor is configured to determine the value by selecting a modified validity period that increases the value in response to a upper limit threshold value being reached and decreases the value in response to a lower limit threshold value being reached. ### Claim 17 (depends on 13) The apparatus of claim 13, wherein the processor is configured to receive the indication of load parameters by receiving historical data on past authentication rate information. ### Claim 18 (depends on 17) The apparatus of claim 17, wherein the processor is configured to determine the value by selecting the value to mitigate predicted peaks and valleys in authentication rates based on the historical data. ### Claim 19 An apparatus comprising: means for receiving an indication of load parameters indicative of authentication rate information; means for determining a value defining a validity period for indicating a period of time during which an authentication session validity object is valid based on the received indication of load parameters; and means for providing the authentication session validity object to a client device. ### Claim 20 (depends on 19) The apparatus of claim 19, wherein means for receiving the indication of load parameters comprises means for receiving re-authentication rate information associated with devices requesting issuance of a subsequent authentication session validity object.