Patent ID: 8510818
Filing Date: 2013-08-13
Classification: H04L

Abstract:
1. A method comprising: receiving at a resource within a first realm, a request from an entity authenticated by a domain controller in a second realm, the request requesting access to the resource within the first realm, wherein the request includes a service ticket and a privilege access certificate (“PAC”); based upon the service ticket and the PAC, generating by the resource within the first realm a user token, wherein the user token includes an Other Org security identifier associated with the entity, wherein the Other Org security identifier indicates that the entity was authenticated by the domain controller in the second realm; based upon whether the user token includes the Other Org security identifier, determining whether entities authenticated by other than the first realm are allowed access to the resource according to a selective trust relationship between the first realm and other realms that include the second realm; in an event that entities authenticated by other than the first realm are allowed access to the resource: in an event that entities authenticated by other than the first realm are not allowed to access the resource, refusing to grant the entity access to the resource.