Back to results
US 2016/0105422 A1Published application
Late binding authentication
AssigneeNetIQ Corporation
InventorsLloyd Leon Burch, Atul Mahajan, Stuart Jensen, Baha Masoud
Life of this patent
Estimating the term…
Abstract
A late-binding token (LBT) is securely generated and provided to a device application. When the LBT is presented and validated, a resource associated with the presentation is bound to the LBT and authenticated for access to a service and provided valid credentials for accessing that service.
Claims20
A method, comprising:
- receiving, by a device, a request for authenticating a resource for access to a service;
- generating a late-binding token (LBT) that is associated with the request;
- sending the LBT to a second device associated with the resource;
- binding the resource to the LBT upon receipt and validation of the LBT, the LBT received back from the second device;
- and
- communicating a message to the second device that binding is complete and that the resource can access and is capable of authenticating to the service for access with a supplied valid authentication response.
3 more elements
A method, comprising:
- requesting, by a device, an access session with a remote service of a second device;
- receiving an authentication token and a late-binding token (LBT);
- sending to an identity provider of a third device:
- a resource identifier for a resource requesting access to the service, the authentication token, and the LBT;
- obtaining from the identity provider a message indicating that the LBT for the resource is bound to the authentication token;
- and
- acquiring a valid authentication response from the identity provider for the resource to participate in the access session with the service as an authenticated resource.
4 more elements
A system, comprising:
- a processor;
- a late-binding authenticator configured and adapted to:
- i) execute on the processor and ii) provide authentication of a resource authenticated to the late-binding authenticator with authentication credentials to a service using a late-binding token (LBT) when the resource requests access to the service.
Dependencies are inferred from the claim text.