The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Apr. 14, 2009
Filed:
Feb. 19, 2004
Messaoud Benantar, Austin, TX (US);
Yen-fu Chen, Austin, TX (US);
John W. Dunsmoir, Round Rock, TX (US);
Randolph Michael Forlenza, Austin, TX (US);
Wei Liu, Wexford, PA (US);
Sandra Juni Schlosser, Austin, TX (US);
Messaoud Benantar, Austin, TX (US);
Yen-Fu Chen, Austin, TX (US);
John W. Dunsmoir, Round Rock, TX (US);
Randolph Michael Forlenza, Austin, TX (US);
Wei Liu, Wexford, PA (US);
Sandra Juni Schlosser, Austin, TX (US);
International Business Machines Corporation, Armonk, NY (US);
Abstract
A Centralized Authentication & Authorization (CAA) system that facilitates secure communication between service clients and service providers. CAA comprises a Service Request Filter (SRF), a Service Client Authentication Program (SCAP), a Service Authorization Program (SAP), and an Authorization Database (ADB). The SRF intercepts service requests, extracts the service client's identifier from a digital certificate attached to the request, and stores the identifier in memory accessible to service providers. In the preferred embodiment, the SRF forwards the service request to a web service manager. The web service manager invokes SCAP. SCAP matches the identifier with a record stored in ADB. SAP queries ADB to determine if the service request is valid for the service client. If the service request is valid, SAP authorizes the service request and the appropriate service provider processes the service request.