Adaptive session lifetime
AssigneeMicrosoft Technology Licensing, LLC
InventorsViolet Anna Barhudarian, George Adrian Drumea, Pui-Yin Winfred Wong, Radhika Kashyap, Titus Constantin Miron, Caleb Baker
Life of this patent
Estimating the term…
Abstract
Session lifetime can be adapted based on session reputation. Session reputation can be computed based on sign-in risk and device risk, among other things. Session lifetime corresponds to a length of time a session is valid and can be determined automatically based on the session reputation. Subsequently, a token can be generated and returned in response to successful authentication that identifies a session and is valid for the determined lifetime.
Claims20
A system of session management, comprising:
- a processor coupled to a memory, the processor configured to execute computer-executable instructions stored in the memory that when executed cause the processor to perform the following actions:
- computing session reputation automatically based on sign-in risk and device risk;
- determining session lifetime based on the session reputation, wherein session lifetime is a length of validity;
- generating a token that identifies a session and is valid for the session lifetime;
- and
- returning the token in response to successful authentication of an entity.
A method of session management, comprising:
- employing at least one processor configured to execute computer-executable instructions stored in a memory that when executed cause the at least one processor to perform the following acts:
- computing session reputation automatically based on sign-in risk and device risk;
- determining session lifetime based on the session reputation, wherein session lifetime is a length of validity;
- generating a token that identifies a session and is valid for the for the session lifetime;
- and
- returning the token in response to successful authentication of an entity.
A system of session management, comprising:
- means for determining session reputation based on sign-in risk and device risk;
- means for determining a session lifetime based on the session reputation, wherein the session lifetime is a length of validity;
- and
- means for generating a token that identifies a session and is valid for the session lifetime.
Dependencies are inferred from the claim text.