International Business Machines Corporation

Kyndryl, Inc.

Seda Özses

Mauro Marzorati

Juraj Nyíri

Michael Joseph Santelia

Shikhar Kwatra

Jana Helton Jenkins

Gary Francis Diamanti

Yaser K Doleh

Rosa M Bolger

Brian W Jensen

Cindy J Mullen

Barbara K Smith

In an approach to unattended authentication in HTTP using time-based one-time passwords, a request is received from a client for a Hypertext Transfer Protocol (HTTP) authentication on a server. A challenge is sent to the client, where the challenge includes a header that indicates that a Time-based One-time Password (TOTP) is to be used for the HTTP authentication. A first response is received from the client based on a first TOTP value and a shared secret, wherein the first response is encoded based on an encoding mechanism included in the header. Responsive to validating the first TOTP value and the shared secret from the client, the client is authenticated.

Unattended authentication in HTTP using time-based one-time passwords

A method, system and computer program product for facilitating inter-proxy communication via an existing protocol. A proxy receives a message (e.g., request message) using a protocol, such as HTTP. If the proxy determines to add proxy relevant information to the message, then the proxy defines a new message header for the inter-proxy communication, which is added to the existing header section of the message. The proxy relevant information is then added in the newly added message header of the message. The message with the proxy relevant information is then transmitted to a subsequent proxy using the protocol of the underlying request-response transaction. In this manner, inter-proxy communications are enabled via an existing protocol (e.g., HTTP) that is used in the request-response transaction so that proxies can communicate with one another pertaining to matters (e.g., maintenance schedule) unrelated to the original intent of the transaction using the existing protocol (e.g., HTTP).

Facilitating inter-proxy communication via an existing protocol

A proxy is modified, to form an enhanced proxy, wherein the proxy is configured to inspect a header portion of a Hypertext Transfer Protocol (http) message, the modifying enabling the enhanced proxy to identify, at the enhanced proxy, a set of http header types in the http message received from a system. An external licensing authority (LA) is modified, to form an enhanced LA, wherein the enhanced LA is configured to verify a header parameter corresponding to a header type in the set of header types and return a license information corresponding to the system. The http message is modified by modifying the header portion in the http message according to the header type and a threshold corresponding to the header type, the header type and the threshold being identified in the license information. The modified http message is transmitted.

Licensing authority controlled modification of http headers in a proxy-based system

A method, a computer system, and a computer program product for authorization using multiple entities is provided. Embodiments of the present invention may include generating a secret, a user hash and an application hash. Embodiments of the present invention may include transmitting the user hash, the application hash and the password to an identity verification authority. Embodiments of the present invention may include generating a password hash. Embodiments of the present invention may include transmitting the user hash and the application hash to a server. Embodiments of the present invention may include identifying the password hash that is associated with the user hash and the application hash, transmitting the password hash and an authorization notification to the identity verification authority, comparing the password hash with a previously stored password hash and determining that the comparison of the password hash with the previously stored password hash matches.

Stateless multi-party authorization system in web applications

Managing content delivery and content usage for client devices can include receiving, using computer hardware, HyperText Markup Language (HTML) code from a content server, wherein the HTML code is sent in response to a request originating from a client device, sending to an HTML licensing server, using the computer hardware, a query specifying the content server and a list including an HTML construct detected in the HTML code, receiving from the HTML licensing server, using the computer hardware, HTML license information specifying a validity status for the HTML construct on the list and a period of time for which the validity status is active, and determining, using the computer hardware, that the HTML code is invalid based on a current time, the validity status of the HTML construct, and the period of time.

Managing content delivery to client devices

A cookie directive file may include an exclusion directive specifying sub domain names associated with the server specified in disjointed form. A hardware processor may request the cookie directive file from a server computer and store the cookie directive file locally with the hardware processor. Responsive to detecting a browser request to send to the server computer, the hardware processor may cull existing cookies based on cookie setting attributes associated with the existing cookies, and remove from the culled list of existing cookies to be sent with the browser request, a cookie that matches the exclusion directive.

Cookie exclusion protocols

Methods and systems are provided for navigating to a pre-scheduled vehicle. A code is analyzed for a user including location information pertaining to the pre-scheduled vehicle, wherein the location information indicates a destination for the user. A location of the user is determined based on a GPS sensor. The user is directed to traverse a route between the location of the user and a location of the pre-scheduled vehicle. A destination of the pre-scheduled vehicle is verified as being consistent with the destination for the user indicated by the location information of the code.

Growing community of inventors

Vienna, Austria

Seda Özses