The Boeing Company

Preston R Barbare

Frank R Ellis, Iv

Melissa Ohlandt

A device includes one or more processors configured to receive, from a user device, an authentication request including credentials of a user. The one or more processors are also configured to obtain user attributes of the user from one or more user data records associated with one or more identity systems. The one or more processors are further configured to obtain one or more roles of the user based on one or more membership lists. The one or more processors are also configured to generate an authentication token indicating the user attributes and the one or more roles.

System architecture for secure highly available microservice applications with decentralized authorization using hybrid attribute authority tokens used for security enforcement in cloud platforms

A device includes one or more processors configured to receive, from a first service, a first access request to request access to a second service on behalf of a user, wherein the first access request includes a user identifier of the user and a first service identifier of the first service. The one or more processors are also configured to, based on determining that the user has granted authorization to the first service to access the second service on behalf of the user, generate a proxy authentication token based on the first access request. The one or more processors are configured to send a second access request to the second service, wherein the second access request includes the first service identifier and the proxy authentication token.

System architecture for secure highly available microservice applications with decentralized authorization and delegated authorization controls in cloud platforms

Growing community of inventors

Mount Pleasant, SC, United States of America

Preston R Barbare