Charles Schwab Co., Inc.

Valery Zubovsky

Charles E Gotlieb

Toby R Kendall

Dominic E Caudell

Suwat Phruksawan

Patrick C McGraw

Konstantinos P Konstantinides

Jay Desai

An authorization server, method, and non-transitory computer readable medium for generating and managing at least one access token associated with a client. The authorization server may include a memory configured to store computer readable instructions; and processing circuitry configured to execute the computer readable instructions to cause the authorization server to, compute an encryption key based on information associated with a user session, embed the encryption key into the at least one access token, map, within a database, the at least one access token to an access token handle associated with the client, return the access token handle to the client, and selectively provide the access token to at least one web Application Programming Interface (API) in response to receipt of the access token handle from the at least one web API.

Method, device, and non-transitory computer readable medium for generating and managing cryptographic keys

A method for authenticating a user for a web service includes receiving, at a first device, a request from a second device to authenticate the user for the web service and in response to the request, returning a code from the first device to the second device and generating, with the second device, a human-perceptible rendering including the code. The method further includes, capturing the human-perceptible rendering by a third device, providing an identifier of the user by the third device, identifying the code from the human-perceptible rendering, and granting access to the web service based on the code identified and the identifier of the user.

System and method for authenticating a user to provide a web service

A system and method uses different authentication techniques, including weak passive authentication techniques, to authenticate users by generating a score and comparing it to a threshold selected according to the feature the user is requesting.

System and method for authenticating users using weak authentication techniques, with differences for different features

A system and method provides access to one or more web services requested from a web site by using an app on a smart device, such as a smart phone or tablet, or the smart device itself.

System and method for providing a web service using a mobile device capturing dual images

A system and method allows a user to register one or more PINs on one or more user devices, and then authenticates the user to a server via the PIN and a token deposited on the user device being used by the user to allow access to an application on the user device. Individual tokens, or all tokens deposited on the user devices for a user account, may be invalidated, and the user is prevented from authenticating himself or herself via a PIN to allow access to an application on any device for which the last token deposited was invalidated, until the same or different PIN is registered for that device.

System and method for allowing access to an application or features thereof on each of one or more user devices

A system and method provides access to one or more web services by capturing a human perceptible rendering on a separate device, identifying a code from the human-perceptible rendering captured and granting access to the one or more web services, responsive to the code identified and an identifier of the user.

System and method for authenticating a user via a mobile device to provide a web service on a different computer system

A system and method uses a set of XACML policies to identify an action or other single degree of variations of various entities that may be called using requests, and uses information from the policy that is useful for obtaining one or more XACML subjects and resources from a request to access the resource, and then builds an XACML policy request using the action or other single degree of variation, and the one or more subjects and resources to determine if authorization for performing the action or other single degree of variation on the one or more resources on behalf of the one or more subjects is granted. Only if the authorization is granted is the action or other single degree of variation performed on the one or more resources.

Method and apparatus for simplified, policy-driven authorizations

A system and method identifies one of several security token services that can be used to convert an identity token into one containing content, a format and having a signature corresponding to a signing key name that a software service can use. The identification of the security token service that may be used to perform the conversion is made using machine readable information about the signing key name that the software service can use.

Growing community of inventors

San Francisco, CA, United States of America

Valery Zubovsky