Patent ID: 9674194
Date: 2017-06-06
CPC Classifications: G06F,H04L

Claim:
1. A computer-implemented method, comprising: receiving, at a permissions management service and from a first device associated with a first user authorized to grant privileges for performing one or more actions on a first resource different from the permissions management service, a first request to create a first permissions grant, the first request specifying one or more users authorized to perform the one or more actions on the first resource; receiving, at the permissions management service and from a second device associated with a second user authorized to grant privileges for performing one or more actions on a second resource different from the permissions management service and the first resource, a second request to create a second permissions grant, the second request specifying one or more users authorized to perform the one or more actions on the second resource; creating the first and second permissions grants based at least in part on the respective first and second requests, the created first and second permissions grants specifying the one or more users; transmitting a third request to the first device associated with the first user authorized to grant privileges to cause a first hardware device communicatively coupled to the first device associated with the first user to grant privileges to use a first private cryptographic key to digitally sign the created first permissions grant and to provide the first digitally signed permissions grant to the first device associated with the first user authorized to grant privileges; receiving, from the first device associated with the first user authorized to grant privileges, the first digitally signed permissions grant; receiving, from the second device associated with the second user authorized to grant privileges, a second digitally signed permissions grant; and transmitting the first and second digitally signed permissions grant to the respective first and second resources, wherein the first and second resource respectively utilizes a first and second public cryptographic key corresponding respectively to the first and second private cryptographic key from a digital certificate to verify the respective first and second digital signature and, if the respective first and second digital signature is verified, determine whether at least one user is permitted to perform one or more actions on the resource based at least in part on a user request to perform the one or more actions on the first and second resource.