Patent ID: 9088580
Filing Date: 2015-07-21
Classification: G06F,H04L

Abstract:
1. A method implemented in a first computing device, the method comprising: identifying, via the first computing device, a user permitted to access a resource via a user token; identifying a service through which the user is permitted to access the resource via a service token; combining the user token and the service token into a single token by deconstructing the user token and the service token into a respective component part such that each respective part is reconstructed into the single token, the combined single token indicating the user permitted to access the resource and the service through which the user is permitted to access the resource; identifying a type of access to the resource without receiving a request for a particular type of access; and generating an access control entry indicating that the user, through the service, is permitted the type of access to the resource based, at least in part, on the combined single token.