Authorization based on access token
AssigneeSap SE
InventorsYanislav Mihaylov, Plamen Pavlov
Life of this patent
Estimating the term…
Abstract
A mobile device may include an authenticator and a processor. The authenticator may generate an authorization request with a secure token to access a server. The processor may access the server using an authorization token, if the authenticator receives the authorization token in response to the authorization request. The authenticator may embed the authorization request with a plurality of parameters to allow the server to determine, based upon at least one of the plurality of parameters, if the authorization token should be given to the mobile device.
Claims13
A mobile device, comprising:
- an authenticator to generate an authorization request with a secure token to access a server;
- and
- a processor to access the server using an authorization token, if the authenticator receives the authorization token in response to the authorization request,
- wherein the authenticator embeds the authorization request with a plurality of parameters to allow the server to determine, based upon at least one of the plurality of parameters, if the authorization token should be given to the mobile device;
- and
- wherein the plurality of parameters is chosen from the group consisting of:
- a requesting mobile client device;
- a third-party application;
- and
- a scope of usage.
6-10. (canceled)
A method of a mobile device, comprising:
- generating, by an authenticator, an authorization request with a secure token to access a server;
- and
- accessing, by a processor, the server using an authorization token, if the authenticator receives the authorization token in response to the authorization request,
- wherein the authenticator embeds the authorization request with a plurality of parameters to allow the server to determine, based upon at least one of the plurality of parameters, if the authorization token should be given to the mobile device. and
- wherein the plurality of parameters is chosen from the group consisting of:
- a requesting mobile client device;
- a third-party application;
- and
- a scope of usage.
16-20. (canceled)
A method for implementation by one or more data processors forming part of at least one computing device, the method comprising
- generating, by at least one data processor, an authorization request with a secure token to access a server;
- and
- accessing, by at least one data processor processor, the server using an authorization token, if the authenticator receives the authorization token in response to the authorization request,
- wherein the authorization request is embedded with a plurality of parameters to allow the server to determine, based upon at least one of the plurality of parameters, if the authorization token should be given to the mobile device;
- and
- wherein the plurality of parameters comprise:
- a requesting mobile client device;
- a third-party application, and a scope of usage.
Dependencies are inferred from the claim text.