Patent ID: 9231955
Filing Date: 2016-01-05
CPC Classification: H04L

Claim Text:
1. A method in a computer network or computer system, the method comprising: receiving, from a client, a request for an operation on a resource associated with a server to form a requested operation; upon receiving the request, automatically determining, by an authorization mechanism associated with the server, whether the resource is associated with access control metadata, the access control metadata indicates the resource is multiparty access controlled and a multiparty authorization is required for the requested operation on the resource; on condition that the resource is not associated with the access control metadata, allowing the requested operation on the resource; and on condition the resource is associated with the access control metadata, checking a token cache, by an authorization module of the server, to determine whether one or more tokens associated with one or more entities and configured to authorize the requested operation are present in the token cache and valid,