US 2013/0086629 A1 · DYNAMIC IDENTITY CONTEXT PROPAGATION

Abstract

Techniques are provided for dynamically propagating identity context for a user in a Service-Oriented Architecture. Methods and apparatus are provided that include receiving a request to invoke a web service, retrieving first security claims from application identity context information pertaining to a user, generating second security claims at runtime, packaging the first and second security claims into an authentication token, and transmitting the authentication token to a second computer system in a service request. The second computer system can be configured to extract the first and second security claims from the authentication token, validate the extracted first and second security claims, generate identity context information based upon the extracted first and second security claims, and publish and propagate the identity content information in an identity context object. The second computer system can verify that the security claims conform to corresponding security claim schemas stored in a claims dictionary.

Claims20

Dependent claims

A method of dynamically propagating identity context information, the method comprising:

receiving, by a first computer system, a request to invoke a web service;
retrieving, by the first computer system, first security claims from application identity context information pertaining to a user;
generating, by the first computer system, second security claims at runtime;
packaging, by the first computer system, the first and second security claims into an authentication token;
and
transmitting, by the first computer system, the authentication token to a second computer system in a service request.

3 more elements

A non-transitory machine-readable medium for a computer system, the non-transitory machine-readable medium having stored thereon a first series of instructions executable by a first processor of a first computer system to dynamically propagate identity context information, the first series of instructions comprising:

instructions that cause the first processor to receive a request to invoke a web service;
instructions that cause the first processor to retrieve first security claims from application identity context information pertaining to a user;
instructions that cause the first processor to generate second security claims at runtime;
instructions that cause the first processor to package the first and second security claims into an authentication token;
and
instructions that cause the first processor to transmit the authentication token to a second computer system in a service request.

3 more elements

Dependencies are inferred from the claim text.

Dynamic identity context propagation

Life of this patent

Dynamic identity context propagation

Life of this patent

Abstract

Claims20