Patent ID: 11876803
Assignee: PUBNUB, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 16:
17. A system for authorizing a client device to a service, the system comprising:
a first electronic device;
a first computer-readable storage medium comprising one or more programming instructions that, when executed, cause the first electronic device to:
define an access control list that comprises a plurality of permissions for a plurality of authorized clients of the customer,
create a plurality of authorization tokens, and encode the ACL into each of the authorization tokens, wherein the instructions to encode the ACL into each of the authorization tokens comprise instructions to:
apply a cryptographic operation on the ACL to generate an encrypted ACL, and
incorporate the encrypted ACL into each of the authorization tokens, distribute the authorization tokens to the authorized clients;

a second electronic device associated with a data center that provides a service to one or more of the authorized clients; and
a second computer-readable storage medium comprising one or more programming instructions that, when executed, cause the second electronic device to:
receive a service request for the service from a requesting client, wherein the service request comprises a submitted authorization token,
decode the submitted authorization token to identify a received ACL in the submitted authorization token,
analyze the received ACL to determine whether the requesting client is an authorized client and the permissions in the applicable ACL grant the requesting client permission to access the service, and
in response to determining that the requesting client is an authorized client and the permissions in the received ACL grant the requesting client permission to access the service.