System and method for pool-based identity authentication for service access without use of stored credentials
AssigneeeBay Inc.
InventorsRaju Venkata Kolluru, Michael Dean Kleinpeter
Life of this patent
Estimating the term…
Abstract
A computer-implemented system and method for pool-based identity authentication for service access without use of stored credentials is disclosed. The method in an example embodiment includes providing provisioning information for storage in a provisioning repository; receiving a service request from a service consumer, the service request including requestor identifying information; generating an authentication request to send to an authentication authority, the authentication request including requestor identifying information; receiving validation of an authenticated service request from the authentication authority; and providing the requested service to the service consumer.
Claims20
A method comprising:
- receiving, by a service provider from a service consumer, a service request representing a request to access a service;
- authenticating the service consumer based on a combination of provisioning information and independently verifiable data, the independently verifiable data not provided by the request to access the service, the provisioning information representing deployment configuration information;
- determining the service consumer is authorized to access the service;
- and
- providing, by the service provider, the service to the service consumer.
A system comprising:
- a memory device for storing instructions;
- and
- a processor, which, when executing the instructions, causes the system to perform operations comprising:
- receiving, by a service provider from a service consumer, a service request representing a request to access a service;
- authenticating the service consumer based on a combination of provisioning information and independently verifiable data, the independently verifiable data is not provided by the request to access the service, the provisioning information representing deployment configuration information;
- determining the service consumer is authorized to access the service;
- and
- providing, by the service provider, the service to the service consumer.
A computer readable non-transitory storage medium storing at least one program configured for execution by a computer, the at least one program comprising instructions to perform operations comprising:
- receiving, by a service provider from a service consumer, a service request representing a request to access a service;
- authenticating the service consumer based on a combination of provisioning information and independently verifiable data, the independently verifiable data is not provided by the request to access the service, the provisioning information representing deployment configuration information;
- determining the service consumer is authorized to access the service;
- and
- providing, by the service provider, the service to the service consumer.
Dependencies are inferred from the claim text.