Patent ID: 8316422
Filing Date: 2012-11-20
Classification: H04L

Abstract:
1. A method comprising: receiving, by an intermediary component that includes a processor to execute program code, a message including first authentication data and second authentication data from a sender computing system, the first authentication data being associated with a first user, the second authentication data being associated with a second user different than the first user; performing, by the intermediary component, an authentication action based on the second authentication data received from the computing system; mapping, by the intermediary component, the first authentication data that is from the sender computing system and associated with the first user to third authentication data that is associated with the first user but different from the first authentication data; creating an assertion including the third authentication data and an attester certificate; and transmitting, by the intermediary component, the assertion to a receiver computing system after performing the authentication action and without transmitting the second authentication data to the receiver computing system; wherein the transmitting the assertion to a receiver computing system comprises: transmitting the assertion to a receiver computing system configured to use the third authentication data to log the first user into the receiver computing system.