Technologies for token-based authentication and authorization of distributed computing resources

A method for token-based access authorization, the method comprising:

• receiving a request for access to a server, the request including a digitally signed license token comprising an unencrypted payload portion and a digital signature comprising an encrypted hash value of the unencrypted payload;
• decrypting the digital signature to obtain the previously-generated hash value;
• generating a new hash value of the unencrypted payload portion;
• determining whether the new hash value matches the previously-generated hash value;
• upon determining that the new hash value matches the previously-generated hash value, generating a new digitally signed token;
• transmitting the new digitally signed token to the server;
• and
• forwarding the request to the server.

An access management server for token-based access authorization, the access management server comprising logic stored in memory, which when executed by a processor of the access management server, causes the access management server to:

• receive a request for access to a server, the request including a digitally signed license token comprising an unencrypted payload portion and a digital signature comprising a an encrypted hash value of the unencrypted payload;
• decrypt the digital signature to obtain the previously-generated hash value;
• generate a new hash value of the unencrypted payload portion;
• determine whether the new hash value matches the previously-generated hash value;
• upon determining that the new hash value matches the previously-generated hash value, generate a new digitally signed token;
• transmit the new digitally signed token to the server;
• and
• forward the request to the server.

A system for token-based authentication and access authorization, the system comprising:

• a remote computing device;
• an access management server;
• and
• a server;
• wherein the access management server is configured to:
• receive, from the remote computing device, a request requesting access to the server, the request including a digitally signed license token comprising an unencrypted payload portion and a first digital signature comprising a an encrypted hash value of the unencrypted payload;
• decrypt the first digital signature to obtain the previously-generated hash value;
• generate a new hash value of the unencrypted payload portion;
• determine whether the new hash value matches the previously-generated hash value;
• upon determining that the new hash value matches the previously-generated hash value, generate a new digitally signed token, the new digitally signed token including a second digital signature appended thereto;
• transmit the new digitally signed token to the server;
• and
• forward the request to the server;
• and
• wherein the server is configured to:
• receive the new digitally signed token from the access management server;
• verify the second digital signature appended to the new digitally signed token;
• upon verifying the second digital signature, locally cache the new digitally signed token and associated entitlements;
• receive the request forwarded by the access management server;
• determine, as a function of the locally-cached new digitally signed token and associated entitlements, whether the access to the server requested by the remote computing device is authorized;
• and
• upon determining that access to the server is authorized, grant the remote computing device access to the server.