Patent ID: 11956371
Assignee: T-MOBILE USA, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. A system, comprising:
one or more processors; and
memory coupled to the one or more processors, the memory including one or more modules that are executable by the one or more processors to:
receive, at a second service provider (2-SP) server, a first service provider (1-SP) recursive authentication token that is associated with a 1-SP server;
identify a service request to access a secure service provided by the 1-SP server, based at least in part on the 1-SP recursive authentication token;
determine whether an additional secure service is required from a third-party service provider (3-SP) server to fulfill the service request;
calculate a cryptographic hash of a 2-SP payload indicating the additional secure service;
generate a 2-SP public-private key pair that is associated with the 2-SP server;
generate a 2-SP digital signature based at least in part on the cryptographic hash and a private key of the 2-SP public-private key pair;
in response to the additional secure service being required, generate a 2-SP recursive authentication token (i) that is associated with the 2-SP server for delivery to the 3-SP server and (ii) that includes the 2-SP digital signature and the 2-SP payload; and
transmit the 2-SP recursive authentication token to the 3-SP server.