International Business Machines Corporation

Avaya Inc.

Rockstar Consortium US LP

Albert Frederich Reiche

Arn Close Hyndman

John Christopher Lynk

Martin Soukup

Christopher Andrew Hatko

Hongbo Li

A computer-implemented method includes receiving a request for access to a micro-service for a subject to perform an action using a resource; determining whether an access policy governing the access for the subject to perform the action using the resource is stored in a cache memory; in response to the access policy being stored in the cache memory, allowing or denying the request based on the access policy; in response to the access policy not being stored in the cache memory, requesting a new access policy for the subject to perform the action using the resource; receiving the new access policy including an access decision and a duration of the new access policy; allowing or denying the request based on the new access policy; and storing the new access policy in the cache memory.

High performance access control

A computer program product including a computer readable storage medium having program instructions to: receive a request for access to a micro-service for a subject to perform an action using a resource; determine whether an access policy governing the access for the subject to perform the action using the resource is stored in a cache memory; in response to the access policy being stored in the cache memory, allow or deny the request to the micro-service based on the access policy; and in response to the access policy not being stored in the cache memory, request a new access policy for the subject to perform the action using the resource, receive the new access policy that includes an access decision and a duration of the new access policy, allow or deny the request based on the new access policy, and store the new access policy in the cache memory.

A directory maintains a record of where a user is located within a plurality of virtual environments. As the user moves within a virtual environment or between virtual environments the user's location is updated in the directory. The user (invitation sender) may send invitations to other users (invitation recipients) to meet the user at a particular time. The invitation may be implemented as a URI which may be sent by Instant Message, E-mail, chat, etc. When an invitation recipient clicks on the URI to accept the invitation, the invitation will be validated and, if valid, enable the invitation recipient to move to the current location of the invitation sender. Invitations may be to meet the invitation sender or to follow the invitation sender. Where the invitation is to follow the invitation sender, a group may be formed that can move within and between virtual environments.

Method and apparatus for enabling people to find each other and stay together in virtual environments

A computer-readable storage medium having computer-executable instructions for authenticating in a computing environment where the computer-executable instructions instruct a processor to receive a token from a client by a first process, send the token to a second process, validate the token by the second process by sending the token to a policy server and receiving a validation of the token from the policy server, and selectively grant access to the computing resource based at least in part upon the validation of the token. The validation of the token indicates that the token is associated with a previous successful authentication of the client by the second process. A system also includes the first process and the second process.

Single sign-on system and method

System and method for transparent single sign-on authentication on computers in a networked environment. A preferred embodiment comprises receiving an authentication request from an operating system of a first computer, requesting credentials of an application making the authentication request, authenticating the credentials, storing the credentials if the authentication is successful, and transmitting the credentials to a second computer. On subsequent access requests made by the user on the second computer, the credentials can be retrieved from the secure store, eliminating the need to prompt the user to re-enter authentication information.

Growing community of inventors

Kanata, Canada

Albert Frederich Reiche