OAuth framework

Patent metadata

Field	Value
Publication number	US-8935757-B2
Application number	US-201213631538-A
Country	US
Kind code	B2
Filing date	Sep 28, 2012
Priority date	Sep 29, 2011
Publication date	Jan 13, 2015
Grant date	Jan 13, 2015

Abstract

A framework, which conforms to the OAuth standard, involves a generic OAuth authorization server that can be used by multiple resource servers in order to ensure that access to resources stored on those resource servers is limited to access to which the resource owner consents. Each resource server registers, with the OAuth authorization server, metadata for that resource server, indicating scopes that are recognized by the resource server. The OAuth authorization server refers to this metadata when requesting consent from a resource owner on behalf of a client application, so that the consent will be of an appropriate scope. The OAuth authorization server refers to this metadata when constructing an access token to provide to the client application for use in accessing the resources on the resource server. The OAuth authorization server uses this metadata to map issued access tokens to the scopes to which those access tokens grant access.

First claim

What is claimed is:

1. A method comprising:
receiving, at an OAuth authorization server, from a first resource server that is separate from the OAuth authorization server, a first set of metadata indicating a first set of scopes that are recognized by the first resource server;
in response to receiving the first set of metadata, storing, at the OAuth authorization server, mappings between scopes in the first set of scopes and subsets of resources maintained by the first resource…

Assignees

• Oracle Int Corp

Inventors

• Srinivasan Venkataraman Uppili
• Angal Rajeev
• Sondhi Ajay

Classifications

• H04L63/0815

  Electricity · mapped topic

• H04L9/3234

  Electricity · mapped topic

• H04L63/10 Primary

  Electricity · mapped topic