Patent ID: 9699167
Date: 2017-07-04
CPC Classifications: G06F,H04L

Claim:
1. A method comprising: receiving a request from a requestor at a given resource, the request comprising a ticket that includes signature data encrypted based on a private key and payload data generated by an authenticating entity, within a premise-based system, in response to authenticating the requestor as being registered to access a set of one or more resources, wherein the given resource is a cloud-based resource remote from the premise-based system; selecting, by the given resource, a public key associated with the authenticating entity based on a key identifier specified in the payload data; decrypting, by the given resource, the signature data by applying the public key to the ticket to provide a decrypted signature; validating, by the given resource, the ticket in response to the request based on evaluating the decrypted signature according to validation parameters stored in the payload data; and providing, by the given resource, a response to the requestor based on the validation, the response one of granting the requestor access to the given resource if the validation determines the ticket to be authentic and authorized for the given resource or denying the requestor access to the given resource if the validation determines to reject the ticket.