Patent ID: 9137227
Filing Date: 2015-09-15
Classification: H04L

Abstract:
1. A computer-implemented method comprising: an Entitlement Broker Service (EBS) receiving, from an External Authentication Application (EAA), an entitlement credential identifying one or more entitled users who are entitled to access a protected computer resource, wherein the protected computer resource is available only to entitled users, and wherein access to the protected computer resource has been requested of an External Client Application (ECA) by a requesting user; the EBS sending a request to an Entitlement Source (ES) for entitlement information for the requesting user based on the entitlement credential for the requesting user; the EBS receiving, from the ES, the entitlement information for the requesting user; the EBS transmitting the entitlement information, for the requesting user, to the ECA, wherein the EBS brokers the entitlement information from the ES to the ECA such that the requesting user is able to access the protected computer resource according to information in the entitlement information; and the EBS filtering entitlement identifiers by using an entitlement wildcard, wherein the entitlement wildcard permits the requesting user to access the protected computer resource if the requesting user has only an incomplete portion of entitlement criteria required by the protected computer resource for access to the protected computer resource.