Patent ID: 11870791
Assignee: NETSKOPE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A policy-controlled authorization system for managing tokens used to access services in a cloud based multi-tenant system, the policy- controlled authorization system comprising:
a client device having a local application, the local application executes on the client device and provides a request for access to a service on a remote application running on a remote instance of a web server, wherein a token is required to access the service;
a policy component including a plurality of policies, wherein the plurality of policies specify access to a plurality of remote applications to be used at the client device for accessing a plurality of services using a plurality of tokens; and
a mid-link server, coupled to the client device, the mid-link server comprising:
a router to provision the plurality of policies for the service to the web server;
a token inspector to:
correlate the token with the plurality of tokens in the policy component for identifying a policy from the plurality of policies associated with the token, wherein the plurality of tokens is categorized into a plurality of categories in a token repository based on the plurality of policies, and the plurality of tokens are further subcategorized based on a threat level associated with the plurality of tokens, and
authorize the token for accessing the service based on the correlation; and based on the authorization, either:
authorize the token for access to the service via the remote application, or
block the token when unauthorized to prevent access to the service; and

a scorer to assign one or more confidence scores to each token based on their categories, compliance with the plurality of policies, and the threat level, wherein the one or more confidence scores indicate need to re-authorize the plurality of tokens or disable the plurality of tokens temporarily.