The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Aug. 26, 2014

Filed:

Jan. 19, 2012
Applicants:

Vadim Eydelman, Bellevue, WA (US);

Brian Kress, Woodinville, WA (US);

Matthias Leibmann, Woodinville, WA (US);

Moustafa Noureddine, Redmond, WA (US);

Lei Yu, Redmond, WA (US);

Haibo Luo, Kirkland, WA (US);

Inventors:

Vadim Eydelman, Bellevue, WA (US);

Brian Kress, Woodinville, WA (US);

Matthias Leibmann, Woodinville, WA (US);

Moustafa Noureddine, Redmond, WA (US);

Lei Yu, Redmond, WA (US);

Haibo Luo, Kirkland, WA (US);

Assignee:

Microsoft Corporation, Redmond, WA (US);

Attorneys:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 15/16 (2006.01);
U.S. Cl.
CPC ...
Abstract

Online and on-premise applications identify trusted authentication providers. The applications are configured with a list of trusted issuers of authentication credentials. When an application receives a request requiring authentication, the application returns a 401 response that includes the trusted issuer list. The requesting application compares the trusted issuer list from the 401 response to its own list of authentication providers. If there is a match between the two lists, then the requesting application creates a self-issued token for the authentication provider. The authentication provider uses the self-issued token to generate an authentication token for the requesting application. The requesting application may also directly create a token for a target partner application, without an authentication provider, if there is a direct trust between the two applications.


Find Patent Forward Citations

Loading…