# US 2021/0241355 A1 · System and method for dynamically orchestrating application program interface trust

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0241355 A1
- Document ID: US20210241355A1
- Status: Published application
- Kind: A1
- Application number: 16/780,804
- Filed: 2020-02-03
- Published: 2021-08-05
- Earliest claimed: 2020-02-03
- Assignees: Dell Products L.P.
- Applicants: Dell Products, LP
- Inventors: Chooi Peng Low
- Web page: https://patentgrep.com/patent/US20210241355A1

## CPC

- G06Q 30/0635: {replenishment orders; recurring orders}
- G06Q 20/02: involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
- G06Q 20/12: specially adapted for electronic shopping systems
- G06Q 20/3825: {Use of electronic signatures}
- G06Q 20/3829: {involving key management}
- G06Q 30/0208: Trade or exchange of goods or services in exchange for incentives or rewards
- H04L 9/30: Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy
- H04L 9/3263: {involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements (network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823)}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/062: {for key distribution, e.g. centrally by trusted party (cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819)}
- H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system includes a purchase portal configured to receive a purchase order from a customer, wherein the purchase order includes a service from each of a plurality of service providers. When receipt of the purchase order is detected, a processor determines first and second ones of the service providers associated with the purchase order; and establishes a trust relationship between the first service provider and the second service provider in a context of the customer. The processor also sends a first request for a first trust artifact to the first service provider and a second request for a second trust artifact to the second service provider; receives the first trust artifact from the first service provider, receives the second trust artifact from the second service provider, sends the first trust artifact to the second service provider, and sends the second trust artifact to the first service provider.

## Claims

### Claim 1

A method comprising:
determining, by a processor, a plurality of service providers associated with a purchase order of a customer; and
for each one of the service providers, establishing trust between the service providers on behalf of the customer that includes exchanging of trust artifacts, wherein the exchanging of the trust artifacts includes sending a request to each of the service providers for a respective trust artifact, receiving the respective trust artifact from each of the service providers and sending the respective trust artifact to other service providers.

### Claim 2 (depends on 1)

The method of claim 1, wherein the service providers were onboarded by the processor prior to the purchase order.

### Claim 3 (depends on 1)

The method of claim 1, wherein the trust artifacts include digital certificates.

### Claim 4 (depends on 1)

The method of claim 1, wherein the purchase order of the customer is a triggering event for the determining the service providers associated with the purchase order.

### Claim 5 (depends on 1)

The method of claim 1, wherein the request sent to the one of the service providers is signed by a service provider specific private key of a public/private key pair generated by the processor respective to the service provider.

### Claim 6 (depends on 5)

The method of claim 5, wherein the service provider specific private key is stored by the processor at a secured storage.

### Claim 7 (depends on 1)

The method of claim 1, further comprising onboarding the service providers associated with the purchase order of the customer prior to the purchase order.

### Claim 8 (depends on 1)

The method of claim 1, wherein the exchanging of the trust artifacts is in a context respective of the customer.

### Claim 9 (depends on 1)

The method of claim 1, further comprising subsequent to the establishing trust between the service providers, sending a particular request by a first service provider to a second service provider, wherein the particular request is signed by a particular private key of the first service provider, wherein the second service provider uses a particular public key of the first service provider to verify authenticity of the particular request.

### Claim 10

A system, comprising:
a purchase portal configured to receive a purchase order from a customer, wherein the purchase order includes a service from each of a plurality of service providers; and
a processor configured, when receipt of the purchase order is detected, to:
determine first and second ones of the service providers associated with the purchase order; and
establish a trust relationship between the first service provider and the second service provider in a context of the customer, the processor further configured to:
send a first request for a first trust artifact to the first service provider and a second request for a second trust artifact to the second service provider;
receive the first trust artifact from the first service provider;
receive the second trust artifact from the second service provider;
send the first trust artifact to the second service provider; and
send the second trust artifact to the first service provider.

### Claim 11 (depends on 10)

The system of claim 10, wherein the first request is signed by a first digital certificate generated by the processor respective to the first service provider, wherein the second request is signed by a second digital certificate generated by the processor respective to the second service provider.

### Claim 12 (depends on 10)

The system of claim 10, wherein the first trust artifact includes a first token shared by the processor to the second service provider, and wherein the second trust artifact includes a second token shared by the processor to the first service provider, wherein the first trust artifact is distinct from the second trust artifact.

### Claim 13 (depends on 10)

The system of claim 10, wherein in the first request is based on an authorized application programming interface between the processor and the first service provider, and wherein the second request is based on a particular authorized application programming interface between the processor and the second service provider.

### Claim 14 (depends on 10)

The system of claim 10, wherein the first service provider and the second service provider are trusted by the processor prior to the receipt the purchase order.

### Claim 15 (depends on 10)

The system of claim 10, wherein the first service provider and the second service provider does not have a particular trust relationship in a particular context of a second customer, wherein the second customer did not purchase a first service of the first service provider and a second service of the second service provider.

### Claim 16

A method comprising:
receiving, by a processor, a first request to onboard a service provider; and
in response to the receiving the first request to onboard the service provider:
generating a first digital certificate specific to the service provider;
sending a second request to the service provider to establish trust between the processor and the service provider, wherein the second request includes a public key respective to the processor; and
receiving a particular response from the service provider, wherein the particular response includes a second digital certificate generated by the service provider respective to the processor.

### Claim 17 (depends on 16)

The method of claim 16, further comprising the processor storing a first private key in a secured storage, wherein the first private key is generated by the processor respective to the service provider.

### Claim 18 (depends on 16)

The method of claim 16, further comprising subsequent to the receiving the response from the service provider, sending, by another service provider, a third request to the service provider, wherein the third request is signed by the second digital certificate generated by the service provider.

### Claim 19 (depends on 16)

The method of claim 16, further comprising determining whether the second digital certificate generated by the service provider is no longer valid.

### Claim 20 (depends on 19)

The method of claim 19, further comprising in response to the determining that the second digital certificate generated by the service provider is no longer valid, sending a third request for a replacement digital certificate to the service provider.