IP Library › Granted Patent US 11,050,560
Granted Patent B2
US 11,050,560 · App. 16/585,879 · Granted Jun 29, 2021

Secure reusable access tokens

Inventors: Amit Mane (Bangalore, IN); Shinoj Zacharias (Bangalore, IN); Vivin Krishnan (Bangalore, IN)
Assignee: International Business Machines Corporation
H04L9/0869H04L9/088H04L9/0866H04L9/0894H04L9/3213
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,050,560
App. No.
16/585,879
Granted
Jun 29, 2021
Kind
B2
Abstract

A method for accessing a resource utilizing a reusable access token. The method includes one or more computer processors generating an initial token, wherein the initial token is associated with a remotely stored backup copy of the initial token. The method further includes transmitting the initial token to a client device. The method further includes receiving a modified token from the client device. The method further includes responding to receiving the modified token by determining that the received modified token is valid. The method further includes responding to determining that the received modified token is valid by granting access to a protected resource.

Claims (59)

1. A method comprising:

generating, by one or more computer processors, an initial token, wherein the initial token is associated with a remotely stored backup copy of the initial token;

transmitting, by one or more computer processors, the initial token to a client device;

receiving, by one or more computer processors, a modified token from the client device;

responsive to receiving the modified token, determining, by one or more computer processors, that the received modified token is valid, wherein determining that the received modified token is valid further comprises:

determining, by one or more computer processors, a secure value that corresponds to a remotely stored backup copy of a seed value that corresponds to the initial token;

determining, by one or more computer processors, that the received modified token includes a first secure value that is the same as the determined secure value;

identifying, by one or more computer processors, between two strings of metadata within the received modified token, a string of characters, wherein the identified string of characters correspond to the first secure value within the received modified token; and

responsive to determining that the received modified token is valid, granting, by one or more computer processors, access to a protected resource.

2. The method of claim 1 , wherein generating the initial token further comprises:

creating, by one or more computer processors, a seed value, wherein the seed value is associated with the remotely stored backup copy of the seed value and corresponds to the initial token; and

inserting, by one or more computer processors, the seed value within the initial token.

3. The method of claim 2 , wherein the seed value is inserted at a random location within the initial token.

4. The method of claim 2 , further comprising:

determining, by one or more computer processors, a first string of metadata and a second string of metadata;

prepending, by one or more computer processors, the first string of metadata to the seed value; and

appending, by one or more computer processors, the second string of metadata to the seed value.

5. The method of claim 1 , wherein determining that the modified token is valid further comprises:

determining, by one or more computer processors, that the received modified token includes a unique ID that is assigned to the client device.

6. A computer program product comprising:

one or more computer readable storage media and program instructions stored on the one or more computer readable storage media, the program instructions readable/executable by one or more computer processors:

program instructions to generate an initial token, wherein the initial token is associated with a remotely stored backup copy of the initial token;

program instructions to transmit the initial token to a client device;

program instructions to receive a modified token from the client device;

program instructions to respond to receiving the modified token, by determining that the received modified token is valid, wherein program instructions to determine that the received modified token is valid further comprise:

program instructions to determine a secure value that corresponds to a remotely stored backup copy of a seed value that corresponds to the initial token; and

program instructions to determine that the received modified token includes a first secure value that is the same as the determined secure value;

program instructions to identify, between two strings of metadata within the received modified token, a string of characters, wherein the identified string of characters correspond to the first secure value within the received modified token; and

program instructions to respond to determining that the received modified token is valid, by granting access to a protected resource.

7. The computer program product of claim 6 , wherein program instructions to generate the token further comprise:

program instruction to create a seed value, wherein the seed value is associated with the remotely stored backup copy of the seed value and corresponds to the initial token; and

program instruction to insert the seed value within the initial token.

8. The computer program product of claim 7 , wherein the seed value is inserted at a random location within the initial token.

9. The computer program product of claim 7 , further comprising:

program instructions to determine a first string of metadata and a second string of metadata;

program instructions to prepend the first string of metadata to the seed value; and

program instructions to append the second string of metadata to the seed value.

10. The computer program product of claim 6 , wherein program instructions to determine that the modified token is valid further comprise:

program instructions to determine that the received modified token includes a unique ID that is assigned to the client device.

11. A computer system comprising:

one or more computer processors;

one or more computer readable storage media; and

program instructions stored on the computer readable storage media for execution by at least one of the one or more computer processors, the program instructions comprising:

program instructions to generate an initial token, wherein the initial token is associated with a remotely stored backup copy of the initial token;

program instructions to transmit the initial token to a client device;

program instructions to receive a modified token from the client device;

program instructions to respond to receiving the modified token, by determining that the received modified token is valid, wherein program instructions to determine that the received modified token is valid further comprise:

program instructions to determine a secure value that corresponds to a remotely stored backup copy of a seed value that corresponds to the initial token; and

program instructions to determine that the received modified token includes a first secure value that is the same as the determined secure value;

program instructions to identify, between two strings of metadata within the received modified token, a string of characters, wherein the identified string of characters correspond to the first secure value within the received modified token; and

program instructions to respond to determining that the received modified token is valid, by granting access to a protected resource.

12. The computer system of claim 11 , wherein program instructions to generate the token further comprise:

program instruction to create a seed value, wherein the seed value is associated with the remotely stored backup copy of the seed value and corresponds to the initial token; and

program instruction to insert the seed value within the initial token.

13. The computer system of claim 12 , wherein the seed value is inserted at a random location within the initial token.

14. The computer system of claim 12 , further comprising:

program instructions to determine a first string of metadata and a second string of metadata;

program instructions to prepend the first string of metadata to the seed value; and

program instructions to append the second string of metadata to the seed value.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 27, 2019
From: MANE, AMIT; ZACHARIAS, SHINOJ; KRISHNAN, VIVIN
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 050519/0112 →
Continuity (1)
Related Publication 20210099297A1 · Apr 1, 2021