公开(公告)号：US20140040993A1

公开(公告)日：2014-02-06

申请号：US14003616

申请日：2011-11-04

申请人： Jorge Lorenzo ,  David Lozano ,  Diego Gonzalez ,  David Vicente

发明人： Jorge Lorenzo ,  David Lozano ,  Diego Gonzalez ,  David Vicente

IPC分类号： G06F21/45

CPC分类号： G06F21/45 ,  G06F21/41 ,  G06F21/6236 ,  H04L63/10

摘要： The protected resource, typically an API, is exposed by endpoints of a plurality of administrative domains. The endpoints are previously unknown by said service application and the method further comprises: i. using an intermediate or global entity for: a) selecting one of said administrative domains based on flexible criteria (i.e. at least on the identity of said end user but also considering varying user or service preferences); and b) performing, said selected administrative domain, a secure authorization to grant access to said end user by means of an open protocol; and ii. providing, said selected administrative domain to said service application, once performed said secure authorization, direct or proxy access to said user's protected resource via the endpoint established by said intermediate entity.

摘要翻译： 受保护资源（通常为API）由多个管理域的端点公开。 端点先前由所述服务应用程序未知，并且该方法还包括：i。 使用中间或全球实体来进行以下操作：a）基于灵活的标准（即，至少在所述最终用户的身份上，但也考虑不同的用户或服务偏好）来选择所述管理域之一; 以及b）执行所述所选择的管理域，通过开放协议授予对所述最终用户的访问的安全授权; 和ii。 向所述服务应用提供所述所选择的管理域，一旦经由所述中间实体建立的端点执行所述安全授权，直接或代理对所述用户的受保护资源的访问。

公开(公告)号：US09165134B2

公开(公告)日：2015-10-20

申请号：US14003616

申请日：2011-11-04

申请人： Jorge Lorenzo ,  David Lozano ,  Diego Gonzalez ,  David Vicente

发明人： Jorge Lorenzo ,  David Lozano ,  Diego Gonzalez ,  David Vicente

IPC分类号： G06F7/04 ,  G06F15/16 ,  G06F21/45 ,  G06F21/41 ,  G06F21/62 ,  H04L29/06

CPC分类号： G06F21/45 ,  G06F21/41 ,  G06F21/6236 ,  H04L63/10

摘要： The protected resource, typically an API, is exposed by endpoints of a plurality of administrative domains. The endpoints are previously unknown by said service application and the method further comprises: i. using an intermediate or global entity for: a) selecting one of said administrative domains based on flexible criteria (i.e. at least on the identity of said end user but also considering varying user or service preferences); and b) performing, said selected administrative domain, a secure authorization to grant access to said end user by means of an open protocol; and ii. providing, said selected administrative domain to said service application, once performed said secure authorization, direct or proxy access to said user's protected resource via the endpoint established by said intermediate entity.

摘要翻译： 受保护资源（通常为API）由多个管理域的端点公开。 端点先前由所述服务应用程序未知，并且该方法还包括：i。 使用中间或全球实体来进行以下操作：a）基于灵活的标准（即，至少在所述最终用户的身份上，但也考虑不同的用户或服务偏好）来选择所述管理域之一; 以及b）执行所述所选择的管理域，通过开放协议授予对所述最终用户的访问的安全授权; 和ii。 向所述服务应用提供所述所选择的管理域，一旦经由所述中间实体建立的端点执行所述安全授权，直接或代理对所述用户的受保护资源的访问。