Patent ID: 7640573

Claim:
A method, performed by a computer processor executing computer executable instructions stored on a computer readable storage medium, of processing multiple types of security schemes, comprising: receiving a message having a first token and a second token, wherein the first token and the second token are different from each other, while associated with a same subject; extracting claims from one or more different types of security tokens corresponding to multiple security schemes, wherein each claim is a statement about each security token's subject that allows security schemes to be based on extracted claims; authenticating the first token by extracting a first claim from the first token and authenticating the second token by extracting a second claim from the second token, wherein the first and second claims comprise different statements about the subject; grouping the first and second claims into a claim collection by selectively mapping the first claim and the second claim to other claims; determining a resource being accessed by extracting or obtaining resource identifiers from the message at run-time or examining a static configuration of a service; authorizing access to the resource referred to in the message based at least in part on the first and second claims; supporting multiple security schemes for the method; and the resource corresponds to at least one of the resource identifiers stored by a computing system.