Patent ID: 9118645
Filing Date: 2015-08-25
Classification: H04L

Abstract:
1. A method, implemented at least in part by a server environment, for distributed authentication using persistent stateless credentials, the method comprising: obtaining, by the server environment, a principal identifier, wherein the principal identifier uniquely identifies a user; generating, by the server environment, an expiration time; obtaining, by the server environment, a secret key identifier, wherein the secret key identifier identifies a secret key that is associated with the user; generating, by the server environment, an initialization vector; encrypting, by the server environment, the principal identifier and the expiration time using the initialization vector and the secret key identified by the secret key identifier, to produce a ciphertext; creating, by the server environment, a credential, wherein the credential comprises: providing, by the server environment, the credential to a client device for persistence at the client device, wherein the credential is a persistent stateless credential that is not associated with a particular server.