首页> 外国专利> Flexible authentication for online services with unreliable identity providers

Flexible authentication for online services with unreliable identity providers

机译:使用不可靠的身份提供商对在线服务进行灵活的身份验证

摘要

A flexible authentication system is described herein that fluidly switches between a federated authentication model and a local short-lived token model that does not require sophisticated authentication infrastructure at the relying party site. Upon detecting an event that causes the identity provider to be unavailable for authentication, the relying party switches to a temporary token model. The system generates a bearer token or challenge associated with the user's identity and (optionally) associated with time data that limits the period during which the token is valid. The relying party communicates the short-lived token to the user using contact information associated with the user and already stored by the relying party. Upon receiving the short-lived token, the user provides the short-lived token to the relying party, and the relying party processes the token to validate the user's identity and then allows the user to access the relying party's online services.
机译:本文中描述了一种灵活的认证系统,该系统在联邦认证模型和本地短暂令牌模型之间流畅地切换,该本地短期令牌模型在依赖方站点不需要复杂的认证基础结构。在检测到导致身份提供者不可用于身份验证的事件后,依赖方将切换到临时令牌模型。系统生成与用户身份相关联的(或可选地)与时间数据相关联的承载令牌或质询,从而限制令牌有效的时间。依赖方使用与用户相关联并且已经由依赖方存储的联系信息将短期令牌传递给用户。在接收到短期令牌后,用户将短期令牌提供给依赖方,并且依赖方处理令牌以验证用户的身份,然后允许用户访问依赖方的在线服务。

著录项

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号