Patent ID: 11895238
Assignee: EXPEL, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC H

Claim 15:
16. A computer-implemented method for using digitally signed web tokens to securely share sensitive data within microservice components of a cybersecurity event detection and response service, the method comprising:
identifying, via an application programming interface (API) gateway, an API request that includes an authorization header comprising authentication data;
assessing, via an authentication service of the API gateway, the authentication data of the API request against a corpus of valid authentication data of the cybersecurity event detection and response service based on the identifying of the API request;
identifying, via the authentication service of the API gateway, (a) the authentication data as valid authentication data and (b) a target entity that corresponds to the authentication data based on the assessment of the authentication data against the corpus of valid authentication data;
obtaining, via the authorization service of the API gateway, a set of permissions that the target entity is authorized to perform within the cybersecurity event detection and response service based on searching a corpus of authorization data using an identifier of the target entity as a search parameter;
generating, at the authorization service of the API gateway, a digitally signed protobuf web token that includes (1) a representation of the target entity and (2) a representation of the set of permissions associated with the target entity based on the obtaining of the set of permissions; and
based on the generation of the digitally signed protobuf web token:
adapting, via one or more processors, the API request to an adapted API request, wherein the adapted API request includes a header component comprising the digitally signed protobuf web token; and
transmitting, via a network, the adapted API request to a target API-processing service of the cybersecurity event detection and response service that automatically processes or automatically handles the adapted API request.