Back to results
US 2026/0100847 A1Published application
Web tokens for authentication of data lake files
AssigneeSap SE
InventorsJohannes Alberti, Felipe Einsfeld Kersting
Life of this patent
Estimating the term…
Abstract
In an example embodiment, data lake files are enhanced to support authentication and authorization via web tokens. Furthermore, the web tokens may be dynamic. Different types of web tokens can be introduced to accomplish different goals. The authentication rules can be integrated into the tokens themselves. This greatly improves scalability based on the richness of a resource system.
Claims20
A system comprising:
- at least one hardware processor;
- and
- a computer-readable medium storing instructions that, when executed by the at least one hardware processor, cause the at least one hardware processor to perform operations comprising:
- receiving, from a user, a request to access a file stored in a data lake;
- receiving a web token associated with the user, the web token containing a header, a signature, and one or more claims;
- determining whether the header contains a certificate chain of software used to access files in a data lake;
- in response to a determination that the header contains the certificate chain of the software used to access files in a data lake, determining whether the signature is a valid signature;
- in response to a determination that the signature is a valid signature, determining whether the claims are valid;
- and
- in response to a determination that the claims are valid, granting access, to the user, to the file.
7 more elements
A method comprising:
- receiving, from a user, a request to access a file stored in a data lake;
- receiving a web token associated with the user, the web token containing a header, a signature, and one or more claims;
- determining whether the header contains a certificate chain of software used to access files in the data lake;
- in response to a determination that the header contains the certificate chain of the software used to access files in the data lake, determining whether the signature is a valid signature;
- in response to a determination that the signature is a valid signature, determining whether the claims are valid;
- and
- in response to a determination that the claims are valid, granting access, to the user, to the file.
4 more elements
A non-transitory machine-readable medium storing instructions which, when executed by one or more processors, cause the one or more processors to perform operations comprising:
- receiving, from a user, a request to access a file stored in a data lake;
- receiving a web token associated with the user, the web token containing a header, a signature, and one or more claims;
- determining whether the header contains a certificate chain of software used to access files in the data lake;
- in response to a determination that the header contains the certificate chain of the software used to access files in the data lake, determining whether the signature is a valid signature;
- in response to a determination that the signature is a valid signature, determining whether the claims are valid;
- and
- in response to a determination that the claims are valid, granting access, to the user, to the file.
4 more elements
Dependencies are inferred from the claim text.