Patent ID: 8839376
Filing Date: 2014-09-16
Classification: H04L

Abstract:
1. A method of authorizing an application in a device to access web services comprising: receiving an appToken from the application in the device; receiving a userToken from the application in the device; determining whether the appToken and the userToken are one of verified and unverified; in the event either one of the appToken and the userToken are unverified, denying authorization for the application to access the web services; in the event both of the appToken and the userToken are verified, issuing the application in the device an accessToken; authorizing the application in the device to access the web services in response to receipt of the accessToken from the application; the appToken being issued to the application as part of application authentication process conducted with an application administrator; and the appToken being issued with the following schema: “token Format”: “Format of the attached token—either SAML or JWT”, “tokenContent”: “Actual token—either in the JWT format or in SAML format”, “expires”: “in Milliseconds from epoch”, “scope”: [“Privilege-1”, “Privilege-2”].