International Business Machines Corporation

Other

Jose Angel Rodriguez

Patrick Ryan Wardrop

Ritchard Leonard Schacher

Jose I Ortiz

Vivek Shankar

Xiaoyan Y Zhang

Chunlong Liang

Simon Helsen

Adrian R Sasmita

James T Mulvey

Weide Victor Soon

An approach for optimizing security token exchange. The approach receives a first request from a client. The approach extracts a first security token and an API reference. The approach validates the first security token. If the security token is valid, then the approach, calls the API and retrieves a second security token, embeds the second security token in the API and sends a second request with a third security token and the reference to the API to another application in a different domain.

Securely preserving prior security tokens for recall

Embodiments herein describe a pattern or syntax that can be used to convey or express the reason or purpose for a service provider to request user data in an identity federation. A service provider can request user data from the identity provider using an authentication process. If the authentication process is successful, the identity provider provides an authorization token to the service provider which it can use to retrieve the user data. The embodiments herein obtain user consent in the same authentication process used to provide the authorization token. In order to do so, the embodiments herein introduce a pattern or syntax that the service provider uses to convey the purpose for which it wants to use the user data to the identity provider.

Enforcing data privacy policies for federated applications

A personal protective headgear is an apparatus fully enclosing a user's head, protecting not only from potential contamination of breathing air but also from potential physical damage. A facial shield is hermetically sealed around the front-facing portion of the apparatus, preventing entrance of unfiltered air. Fans direct air through a set of filters, thus cleansing air entering the apparatus. The apparatus may further be equipped with a variety of interactivity modules, including cameras, speakers, lights, displays, and more. A set of sensors may be utilized to monitor the user and the user's surroundings in different conditions. The apparatus may also include wireless capabilities that allow the wearer to transfer information to and from a remote user, thereby allowing the user to follow instructions or otherwise interact with a guide or other such remote companion. Swappable battery packs allow the user to avoid losing power, even while replenishing power supplies.

Personal protective headgear

An enterprise server is provisioned with an authentication response language, where the authentication response language allows the enterprise server to issue instructions for authentication steps to an enterprise client, which enables the enterprise client to execute a set of instructions for navigating an authentication sequence. The set of instructions installed into and served by the enterprise server varies depending on a protocol inherently used by the authentication topology. The enterprise client, when accessing a protected resource, and not already authenticated, receives a set of authentication instructions from the enterprise server formulated in the authentication response language. The client starts to interpret the provided authentication instructions, but controls the presentation layer and interface of any user interactions. The client follows the sequence by sending requests and receiving responses from one or more servers in the topology until the sequence is complete.

Abstracting an authentication sequence using HTTP

Growing community of inventors

Cayey, Puerto Rico

Jose Angel Rodriguez