Patent ID: 9160731
Filing Date: 2015-10-13
Classification: G06F,H04L,Y04S

Abstract:
1. A method, in a data processing system, for establishing a trust relationship between two products, the method comprising: receiving, by a resource device, a registration request from an application device to access a resource on the resource device by an application and users of the application on the application device; responsive to authenticating the registration request, sending, by the resource device, a registration response to the application device using a redirection uniform resource identifier (URI) provided with the registration request, wherein the registration response includes an authorization code and a symmetric key, wherein the authorization code in the registration response is encrypted by the symmetric key and wherein the symmetric key is a one-time use key that is generated per request and has an expiration time period; receiving, by the resource device, an access token request from the application device that includes the symmetric key, verifiable authentication data, and the redirection URI; validating that the redirection URI included with the access token request matches the redirection URI used to send the registration response prior to sending the access token to the application device; and responsive to validating the access token request, sending, by the resource device, an access token to the application device, wherein the access token allows the application and users of the application to access the resource on the resource device thereby establishing the trust relationship between the resource device and the application device.