Back to results
US 9,882,892 B1Granted
User authorization using intent tokens
AssigneeIntuit Inc.
InventorsPeter Vogel, Vinod K. Nair, Wing Ming Brigitte Chan, Kishore Jonnalagedda
Life of this patent
Estimating the term…
Abstract
The disclosed embodiments provide a system that enables access to a resource. During operation, the system obtains, from a first service, a request for access to the resource on a second service by a user using the first service. Next, the system provides, in a response to the request, an intent token for accessing the resource by the user to the first service. Upon receiving the intent token from an authorized user on the second service, the system enables access to the resource on the second service for the user on the first service.
Claims11
A computer-implemented method for enabling access to a resource on a second computing service, comprising:
- receiving, from a first computing service, a request for access to the resource on the second computing service;
- upon receiving the request, generating an intent token associated with the
- request and providing the intent token to a user accessing the first computing service, wherein the intent token encodes an identification of the user and resource on second computing service, wherein the intent token is provided in conjunction with a mechanism for transferring the intent token from the user accessing the first computing service to an authorized user of the second computing service;
- receiving, from the second computing service, the intent token from the authorized user;
- and
- upon receiving the intent token from the authorized user and matching the token with the request, providing information about the request to the authorized user after receiving the intent token from the authorized user;
- receiving approval for the request from the authorized user prior to enabling access to the resource for the user accessing the first computing service;
- enabling access to the resource on the second computing service for the user accessing the first computing service, wherein enabling access to the resource on the second computing service comprises:
- establishing a connection between the first service and the second computing service, and
- providing the first computing service with access to the resource on the second computing service for the user accessing the first computing service.
7 more elements
A system for enabling access to a resource on a second computing service, comprising:
- a token-generation apparatus configured to generate an intent token
- associated with a request from a user accessing a first computing service for access to the resource on the second computing service, wherein the intent token encodes an identification of the user and resource on second computing service;
- and
- a processing apparatus configured to:
- receive, from the first computing service, the request for access to the resource;
- provide the intent token to the user accessing the first computing service, wherein the intent token is provided in conjunction with a mechanism for transferring the intent token from the user accessing the first computing service to an authorized user of the second computing service;
- receive from the second computing service, the intent token from the authorized user;
- and
- upon receiving the intent token from the authorized user and matching the intent token with the request, provide information about the request to the authorized user after receiving the intent token from the authorized user;
- receive approval for the request from the authorized user prior to enabling access to the resource by the user for the first computing service;
- enable access to the resource on the second computing service for the user accessing the first computing service, wherein enabling access to the resource on the second computing service comprises:
- establishing a connection between the first service and the second computing service, and
- providing the first computing service with access to the resource on the second computing service for the user accessing the first computing service.
10 more elements
A non-transitory computer-readable storage medium storing instructions that when executed by a computer cause the computer to perform a method for enabling access to a resource on a second computing service, the method comprising:
- receiving, from a first computing service, a request for access to the resource on the second computing service;
- upon receiving the request, generating an intent token associated with the
- request and providing the intent token to a user on first computing service, wherein the intent token is provided in conjunction with a mechanism for transferring the intent token from the user accessing the first computing service to an authorized user of the second computing service;
- receiving, from the second computing service, the intent token from the authorized user;
- and
- upon receiving the intent token from the authorized user and matching the intent token with the request, providing information about the request to the authorized user after receiving the intent token from the authorized user;
- and
- receiving approval for the request from the authorized user prior to enabling access to the resource for the user accessing the first computing service;
- enabling access to the resource on the second computing service for the user accessing the first computing service, wherein enabling access to the resource on the second computing service comprises:
- establishing a connection between the first service and the second computing service, and
- providing the first computing service with access to the resource on the second computing service for the user accessing the first computing service.
8 more elements
Dependencies are inferred from the claim text.