Patent ID: 8640200

Claim:
A computer implemented method for enriching security credentials, said method comprising: under the control of one or more computer systems configured with executable instructions, generating a credential that grants a set of access rights to perform one or more actions and issuing the credential to a user; receiving, from at least one principal, an injection of a first set of context information into the credential; scoping the first set of context information injected in the credential to the principal that provided the injection; receiving a request to authenticate at least one claim using the credential; determining whether the principal that provided the injection is trusted; if the principal is determined to be trusted, translating the first set of context information scoped to the principal and contained in the credential to a second set of context information residing in a different namespace from the first set of context information; and associating the second set of context information with a different principal; and generating an authenticate response based at least in part on the different principal.