IP Library Granted Patent US 11,539,710
Granted Patent B2
US 11,539,710 · App. 17/320,029 · Granted Dec 27, 2022

System resiliency with temporary access

Inventors: Pankaj Gambhir (Ho-Ho-Kus, NJ); Sean T. Curtis (Rockville Centre, NY); Mahesh Swaminathan (Elmsford, NY); Kai Wang (Princeton, NJ); Krutarth Patel (Harrison, NJ)
Assignee: Disney Enterprises, Inc.
H04L63/105H04L63/104H04L63/108H04L67/141
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,539,710
App. No.
17/320,029
Granted
Dec 27, 2022
Kind
B2
Abstract

A method for use by a system computer for granting access to a network resource includes receiving, in a first session, a first request for accessing the network resource, the first request including authorization information of a user of an access computer, initiating, while in the first session and using the first authorization information, a first authorization process with one or more authorization computers, and determining a failure relating to the first authorization process initiated with the one or more authorization computers. The method further includes, upon determining the failure, sending a second request indicating a temporary access token is to be delivered to the access computer in response to an access computer executing a session refresh for initiating a second session.

Claims (40)

1. A method for use by a system computer for granting access to a network resource, the method comprising:

receiving, in a first session, a first request for accessing the network resource, the first request comprising first authorization information of a user of an access computer;

initiating, while in the first session and using the first authorization information, a first authorization process with one or more authorization computers;

determining a failure relating to the first authorization process initiated with the one or more authorization computers; and

upon determining the failure, sending a second request indicating a temporary access token is to be delivered to the access computer, the temporary access token to be delivered to the access computer in response to the access computer executing a session refresh for initiating a second session.

2. The method of claim 1 , further comprising:

initiating, using the first authorization information and while being in the second session, a second authorization process with the one or more authorization computers.

3. The method of claim 2 , wherein the temporary access token expires after the second session.

4. The method of claim 3 , further comprising initiating a third session in response to the access computer executing a subsequent session refresh.

5. The method of claim 4 , wherein if the failure is resolved during the second authorization process, an entitlement to the network resource is associated with the user, and the entitlement is sent to the access computer during the third session.

6. The method of claim 4 , wherein the user is asked to provide second authorization information during the third session.

7. The method of claim 1 , wherein the temporary access token grants access to an additional network resource.

8. The method of claim 1 , further comprising:

receiving, from a plurality of additional access computers, a plurality of additional requests for access to the network resource, each of the plurality of additional requests comprising authorization information of a respective one of a plurality of additional users;

determining that a failure metric is above a predetermined threshold; and

upon determining that the failure metric is above the predetermined threshold, obtaining a plurality of temporary access tokens to grant the plurality of additional users the temporary access to the network resource.

9. The method of claim 8 , further comprising:

upon obtaining the plurality of temporary access tokens, initiating a plurality of concurrent authorization processes using the authorization information of the plurality of additional users.

10. The method of claim 9 , wherein the plurality of concurrent authorization processes are initiated based on a system health metric or a queue depth threshold.

11. A system for granting access to a network resource, the system comprising:

a system computer configured to:

receive, in a first session, a first request for accessing the network resource, the first request comprising first authorization information of a user of an access computer;

initiate, while in the first session and using the first authorization information, a first authorization process with one or more authorization computers;

determine a failure relating to the first authorization process initiated with the one or more authorization computers; and

upon determining the failure, send a second request indicating a temporary access token is to be delivered to the access computer, the temporary access token to be delivered to the access computer in response to the access computer executing a session refresh for initiating a second session.

12. The system of claim 11 , wherein the system computer is further configured to:

initiate, using the first authorization information and while being in the second session, a second authorization process with the one or more authorization computers.

13. The system of claim 12 , wherein the temporary access token expires after the second session.

14. The system of claim 13 , wherein the system computer is further configured to:

initiate a third session in response to the access computer executing a subsequent session refresh.

15. The system of claim 14 , wherein if the failure is resolved during the second authorization process an entitlement to the network resource is associated with the user, and the entitlement is sent to the access computer during the third session.

16. The system of claim 14 , wherein the user is asked to provide second authorization information during the third session.

17. The system of claim 11 , wherein the temporary access token grants access to an additional network resource.

18. The system of claim 11 , wherein the system computer is further configured to:

receive, from a plurality of additional access computers, a plurality of additional requests for access to the network resource, each of the plurality of additional requests comprising authorization information of a respective one of a plurality of additional users;

determine that a failure metric is above a predetermined threshold; and

upon determining that the failure metric is above the predetermined threshold, obtain a plurality of temporary access tokens to grant the plurality of additional users the temporary access to the network resource.

19. The system of claim 18 , wherein the system computer is further configured to:

upon obtaining the plurality of temporary access tokens, initiate a plurality of concurrent authorization processes using the authorization information of the plurality of additional users.

20. The system of claim 19 , wherein the plurality of concurrent authorization processes are initiated based on a system health metric or a queue depth threshold.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 13, 2021
From: GAMBHIR, PANKAJ; CURTIS, SEAN T.; SWAMINATHAN, MAHESH; WANG, KAI; PATEL, KRUTARTH
To: DISNEY ENTERPRISES, INC.
Reel/Frame 056235/0920 →
Continuity (2)
Provisional Application 63051291 · Jul 13, 2020
Related Publication 20220014528A1 · Jan 13, 2022