Patent ID: 6742114
Filing Date: 2004-05-25
Classification: H04L

Abstract:
A method for delegating rights in a distributed computing system containing at least one of a domain and a realm, the method comprising the steps of:receiving at a deputization point in the system a request from a principal for delegation of at least one right of the principal to at least one deputy such that the deputy can perform one or more computational tasks for the principal, the request identifying the principal and the rights to be delegated to the deputy such that the deputy can perform the one or more computational tasks for the principal, the principal having a public key and a corresponding private key; creating at least one deputy having an identity which is different from the identity of the principal; providing the deputy with a public key and a corresponding private key; and forming a deputy credential which identifies the principal, identifies the rights delegated to the deputy by the principal, contains the deputy private key encrypted with the principal public key, contains the deputy public key, contains a domain/realm-specific credential identifying rights of the deputy within a specific group of computers in a network, and is signed by the deputization point.