US 9,521,000 B1 · Complete forward access sessions

Abstract

A service provider manages access control to multiple services through an authentication system. One or more services are able to fulfill requests at least in part by submitting requests to other services of the service provider. Such a service is able to obtain, from the authentication system, information that can be passed on to one or more other services to enable the one or more other services to determine request validity without having to contact the authentication system. The information may include, for example, one or more responses that the one or more other services would have received had the one or more services contacted the authentication system themselves.

Claims24

Dependent claims

A computer-implemented method for managing access to a first service of a service provider, comprising:

under the control of one or more computer systems configured with executable instructions,
receiving a request, originated from a requestor, to perform one or more operations, the request including authentication information and derived information, the derived information derived by an authentication service based at least in part on secret information lacked by the requestor, the derived information including identity information that specifies an identity, policy information specifying one or more policies associated with the identity, and origination information identifying the requestor;
determining, without communicating with the authentication service, based at least in part on the secret information, the authentication information, and the derived information, whether to fulfill the request;
and
causing the request to be fulfilled as a result of determining to fulfill the request.

2 more elements

A system, comprising:

one or more processors;
and
memory including instructions executable by the one or more processors that cause the system to at least:
receive a request, originated from a requestor, to perform one or more operations, the request including authentication information and derived information, the derived information derived by an authentication system based at least in part on secret information lacked by the requestor, the derived information including identity information that specifies an identity, policy information specifying one or more policies associated with the identity, and origination information identifying the requestor;
determine, without communicating with the authentication system, based at least in part on the secret information, and the authentication information, and the derived information, whether to fulfill the request;
and
cause the request to be fulfilled as a result of determining to fulfill the request.

4 more elements

Dependencies are inferred from the claim text.

Complete forward access sessions

Life of this patent

Complete forward access sessions

Life of this patent

Abstract

Claims24