The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Aug. 25, 2026
Filed:
Jun. 28, 2024
Amazon Technologies, Inc., Seattle, WA (US);
Arjun Prasad Dasarakothapalli, Mercer Island, WA (US);
Ajay Radhakrishnan, Seattle, WA (US);
Andrew Oppenlander, Bothell, WA (US);
Ron Cully, Worley, ID (US);
Hamed Seifoddini Rad, Oakville, CA;
Rebecca Claire Weiss, Vienna, VA (US);
Amazon Technologies, Inc., Seattle, WA (US);
Abstract
Techniques for cross-service auditable transitive identity propagation are described. A first application seeking to access a resource managed or provided by a second application receives a first access token generated by an identity provider. The first application performs one or more token exchanges, using the first access token, to obtain a second access token generated by an identity service. The second access token includes identity information associated with a user in a directory associated with the identity service. The first application provides the second access token to the second application as part of a request to access the resource. The second application utilizes the user identity information from the second token to perform fine-grained access control and can include user identity information in logs or events enabling auditing.