Application Identity Design
First Claim
1. An interoperability network configured to facilitate messaging and mediate policy differences among a plurality of independent service providers and users having associated client machines, the interoperability network comprising one or more computing devices configured to:
- receive a request for a first service to perform a particular task involving a second service on behalf of a first user, wherein the first and second services are in communication with the interoperability network and are provided by first and second ones of the independent service providers, respectively;
determine whether the first user has provided first set of credentials that defines access information for the second service, the first set of credentials being included among a plurality of sets of credentials stored on one or more storage media accessible through the interoperability network;
determine whether the first service provider is authorized to act on behalf of the first user with respect to the second service with reference to one or more of a plurality of permissions stored on the one or more storage media; and
where the first user has provided the first set of credentials, and where the first service provider is authorized to act on behalf of the first user with respect to the second service, retrieve the first set of credentials from the one or more storage media, and provide the first set of credentials to the second service for authentication to facilitate performance of the particular task.
0 Assignments
0 Petitions
Accused Products
Abstract
Methods and apparatus, including computer program products, implementing and using techniques for providing user credentials over a network to a remote computer application. User credentials for the remote computer application are stored in a central repository that is accessible through the network. A request is sent to a service to perform, on behalf of a user, a particular task involving the remote computer application. It is determined whether the service has been granted permission to act on behalf of the user with respect to the remote computer application. When the service has permission to act on behalf of the user, the service is used to retrieve the user'"'"'s credentials for the remote computer application from the central repository and to supply the retrieved user credentials to the remote computer application.
-
Citations
25 Claims
-
1. An interoperability network configured to facilitate messaging and mediate policy differences among a plurality of independent service providers and users having associated client machines, the interoperability network comprising one or more computing devices configured to:
-
receive a request for a first service to perform a particular task involving a second service on behalf of a first user, wherein the first and second services are in communication with the interoperability network and are provided by first and second ones of the independent service providers, respectively; determine whether the first user has provided first set of credentials that defines access information for the second service, the first set of credentials being included among a plurality of sets of credentials stored on one or more storage media accessible through the interoperability network; determine whether the first service provider is authorized to act on behalf of the first user with respect to the second service with reference to one or more of a plurality of permissions stored on the one or more storage media; and where the first user has provided the first set of credentials, and where the first service provider is authorized to act on behalf of the first user with respect to the second service, retrieve the first set of credentials from the one or more storage media, and provide the first set of credentials to the second service for authentication to facilitate performance of the particular task. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10)
-
-
11. A method for facilitating communications via an interoperability network configured to facilitate messaging and mediate policy differences among a plurality of independent service providers and users having associated client machines, the method comprising:
-
receiving a request for a first service to perform a particular task involving a second service on behalf of a first user, wherein the first and second services are in communication with the interoperability network and are provided by first and second ones of the independent service providers, respectively; determining whether the first user has provided first set of credentials that defines access information for the second service, the first set of credentials being included among a plurality of sets of credentials stored on one or more storage media accessible through the interoperability network; determining whether the first service provider is authorized to act on behalf of the first user with respect to the second service with reference to one or more of a plurality of permissions stored on the one or more storage media; and where the first user has provided the first set of credentials, and where the first service provider is authorized to act on behalf of the first user with respect to the second service, retrieving the first set of credentials from the one or more storage media, and providing the first set of credentials to the second service for authentication to facilitate performance of the particular task. - View Dependent Claims (12, 13, 14, 15, 16, 17, 18, 19, 20)
-
-
21. A computer readable storage medium storing instructions for facilitating communications via an interoperability network configured to facilitate messaging and mediate policy differences among a plurality of independent service providers and users having associated client machines, the instructions comprising:
-
first instructions for receiving a request for a first service to perform a particular task involving a second service on behalf of a first user, wherein the first and second services are in communication with the interoperability network and are provided by first and second ones of the independent service providers, respectively; second instructions for determining whether the first user has provided first set of credentials that defines access information for the second service, the first set of credentials being included among a plurality of sets of credentials stored on one or more storage media accessible through the interoperability network; third instructions for determining whether the first service provider is authorized to act on behalf of the first user with respect to the second service with reference to one or more of a plurality of permissions stored on the one or more storage media; and fourth instructions for, where the first user has provided the first set of credentials, and where the first service provider is authorized to act on behalf of the first user with respect to the second service, retrieving the first set of credentials from the one or more storage media, and providing the first set of credentials to the second service for authentication to facilitate performance of the particular task. - View Dependent Claims (22, 23, 24, 25)
-
Specification