Method for controlling access to resources
Originating portfolio: NET
Estimated expiration: 2030-Jan-25
Potentially relevant companies (1): Salesforce.com, Inc.
Products & technologies (1): Web:Systems & Services
The invention enables a service provider (46) to authorise a service to access a resource or function provided by a service provider based on a resource owner's consent, wherein the consent takes into account both to the identity of the service requesting the access and the identity of the user (42) of the requesting service (49). The invention separates the service access process into a first step in which the requesting service is granted access on the condition that the access is made in the name of a defined user, and a second step in which the user of the requesting service authorises the requesting service to access the resource in the requesting user' s name.
A method comprising: issuing a resource request from an application to a service provider (46), the resource request requesting access to a resource at the service provider, wherein the resource request is issued by the application in the name of a requesting user (42); and providing credentials to the service provider (46) such that an owner of the resource (48) is able to grant consent to the resource request, wherein the consent is dependent on both the application and the requesting user (42): sending a first authorisation request seeking permission from the owner of the resource (48) for the application to access the resource I, the method characterized by : receiving a conditional authorisation granting the application permission to access the said resource on condition that the access request is made in the name of a user (42) defined in the conditional authorization, and sending a second access request from the application to the service provider requesting access to the resource, the second access request including details of the conditional authorisation.
Availability date: Available now
Interested in licensing a slice of this patent? Contact us to take the next step, or read about our method to understand the logistics.