Patent ID: 8340283
Filing Date: 2012-12-25
Classification: H04L

Abstract:
1. A method for delegating authority from a delegating agent to a delegated agent to authorize the delegated agent to act on behalf of the delegating agent with respect to a recognizing agent in order to enable the delegated agent to access computational resources through the recognizing agent, the method comprising: generating, by the delegating agent, a delegation ticket contained a first delegated agent identifier and a first copy of a session key, wherein the delegation ticket is encrypted for the recognizing agent; generating, by the delegating agent, a first message containing the delegation ticket and a second copy of the session key, wherein the first message is encrypted for the delegated agent; and transmitting the first message from the delegating agent to the delegated agent decrypting, by the delegated agent, the first message to extract the second copy of the session key and the delegation ticket; encrypting, by the delegated agent, a second delegated agent identifier with the second copy of the session key to create an encrypted second delegated agent identifier; generating, by the delegated agent, a second message containing the delegation ticket and the encrypted second delegated agent identifier, wherein the second message is encrypted for the recognizing agent; and transmitting the second message from the delegated agent to the recognizing agent.