Patent ID: 11962593
Assignee: nan
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 6:
7. A method, comprising:
generating an access token that contains both alias identity attributes for an alias identity associated with a user and principal identity attributes for a principal identity that is also associated with the user, wherein the alias identity attributes include login credentials for the alias identity, and wherein the principal identity attributes include a principal identifier and login credentials for the principal identity;
after authenticating the user on behalf of a first one of a plurality of secure applications based on the login credentials for the alias identity, in response to receiving a request to authenticate the user on behalf of a second one of the secure applications, and without authenticating the user based on the login credentials for the principal identity, transmitting the access token to an authorization endpoint in the second one of the secure applications to cause the authorization endpoint in the second one of the secure applications to grant, based on the principal identifier of the principal identity, a scope of access with regard to protected resources in the second one of the secure applications; and
storing the alias identity in an entry for the user in a database while the user is accessing the first one of the secure applications during a first time period;
wherein the alias identity attributes further include an authorization scope of the alias identity;
wherein storing the alias identity in the entry includes receiving the authorization scope of the alias identity from the first one of the secure applications and storing the authorization scope of the alias identity received from the first one of the secure applications in the entry; and
wherein authenticating the user on behalf of the first one of the secure applications is performed in response to the user requesting access to the first one of the secure applications during a second time period that is subsequent to the first time period.