Patent ID: 7991996
Filing Date: 2011-08-02
Classification: H04L

Abstract:
1. A computer system for authenticating and authorizing a service request sent from a service client through a firewall to a service provider, the computer system comprising: one or more processors, one or more computer-readable memories and one or more computer-readable, tangible storage devices; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to intercept an incoming service request from the service client on a communication channel, the service request having a digital certificate of the service client attached; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to authenticate the digital certificate with an issuing certification authority; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to extract a service client identifier from the digital certificate associated with the service request; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to store the service client identifier in a memory; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to forward the service request to a web service manager; program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to match, responsive to receiving an authentication request from the web service manager, the service client identifier with a service client record; and program instructions, stored on at least one of the one or more computer-readable, tangible storage devices for execution by at least one of the one or more processors via at least one of the one or more computer-readable memories, to authorize, responsive to matching the service client identifier with the service client record, the service request.