Patent ID: 8966572
Filing Date: 2015-02-24
Classification: G06F,H04L

Abstract:
1. A method for propagating identity context information, the method comprising: receiving, at a computer, a service request initiated by a user requesting a web application to invoke one or more web services, the service request requesting conversion of an authentication token included in the service request into service-side identity context information pertaining to the user; extracting, by the computer, first and second sets of security claims from the authentication token, the first set of security claims having been retrieved from identity context information pertaining to the user generated in response to the user being authenticating to the web application, the identity context information having a set of one or more identity-related attributes and a set of one or more security claims related to characteristics of the user, the user's environment, or combinations thereof, and the second set of security claims having been created based on runtime information different from the identity context information; validating, by the computer, the extracted first and second sets of security claims; generating, by the computer system, the service-side identity context information pertaining to the user based upon the extracted first and second sets of security claims; and propagating, by the computer, the service-side identity context information pertaining to the user in an identity context object to at least one of the one or more web services.