Patent ID: 8806192
Filing Date: 2014-08-12
Classification: G06F,H04L

Abstract:
1. A method, comprising: responsive to sending a request to validate a client to a validation server, receiving a signed genuine ticket based upon validation of the client from the validation server, the signed genuine ticket comprising a validation server signature of the validation server but not a signature of the client, the validation server signature indicating that the validation server validated the client; responsive to sending a request to consume data or one or more services to a service provider server, receiving a session ID from the service provider server, the service provider server different than the validation server, the client different than the service provider server and the validation server; signing the session ID with at least one of a client signature using a private key or a lockbox signature using a licensing service lockbox private key to create a signed session ID; sending to the service provider server an authorization response comprising the signed genuine ticket and the signed session ID; receiving an authorization from the service provider server based upon the service provider server authorizing at least one of the client signature, the lockbox signature, the signed session ID, or the signed genuine ticket; responsive to sending a second request to consume data or one or more services to the service provider server, receiving a second session ID from the service provider server; signing the second session ID to create a signed second session ID; sending to the service provider server a second authorization response comprising the signed genuine ticket and the signed second session ID; and receiving a second authorization from the service provider server.