Patent ID: 9098675
Filing Date: 2015-08-04
Classification: G06F,G06Q,H04L

Abstract:
1. A computer implemented method, comprising: associating, by one or more computing devices, one or more delegation profiles with an account of a customer, the account being maintained by a provider of one or more resources accessible to the customer as determined by one or more terms of the account, each delegation profile defining a validation policy and associated with one or more permissions for accessing and utilizing the one or more resources, each delegation profile set by the customer and providing access to a subset of the one or more resources; receiving, by the one or more computing devices, from an entity, a request for access to the one or more resources associated with the account, the entity not directly associated with the account of the customer, the request including information usable to select a delegation profile, the information including an identifier of the delegation profile; obtaining, by the one or more computing devices, identity information for the entity, the identity information generated by an identity verification entity separate from the provider, the entity having a relationship with the identity verification entity enabling the identity verification entity to provide the identity information to the provider on behalf of the entity, the identity information complying with one or more authentication requirements of the provider; determining, by the one or more computing devices, an applicable delegation profile, from the one or more delegation profiles, based at least on the information usable to select the delegation profile; processing, by the one or more computing devices, the identity information and the information associated with the applicable delegation profile using at least one rules engine to determine the one or more permissions associated with the applicable delegation profile, the one or more permissions indicating one or more actions the entity is permitted to perform against the one or more resources under the account of the customer; verifying that the validation policy of the applicable delegation profile specifies that the entity is allowed to use the applicable delegation profile to perform the one or more actions against the one or more resources; and providing, by the one or more computing devices, the entity with access to the one or more resources as set forth by the one or more permissions associated with the applicable delegation profile, wherein providing the entity with access to the one or more resources includes providing credentials usable by the entity to obtain access to the subset of the one or more resources.