US 11,736,467 B2
Technologies for token-based authentication and authorization of distributed computing resources
Scott Edward Blasi, Littleton, CO (US)
Assigned to Worldpay, LLC, Symmes Township, OH (US)
Filed by Worldpay, LLC, Symmes Township, OH (US)
Filed on Aug. 25, 2022, as Appl. No. 17/895,664.
Application 17/895,664 is a continuation of application No. 17/154,814, filed on Jan. 21, 2021, granted, now 11,463,427.
Application 17/154,814 is a continuation of application No. 16/456,245, filed on Jun. 28, 2019, granted, now 10,931,657, issued on Feb. 23, 2021.
Application 16/456,245 is a continuation of application No. 16/010,869, filed on Jun. 18, 2018, granted, now 10,382,425, issued on Aug. 13, 2019.
Application 16/010,869 is a continuation of application No. 15/162,936, filed on May 24, 2016, granted, now 10,044,701, issued on Aug. 7, 2018.
Prior Publication US 2022/0407850 A1, Dec. 22, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 9/54 (2006.01); G06F 21/10 (2013.01); H04L 9/32 (2006.01); G06F 21/33 (2013.01)
CPC H04L 63/0807 (2013.01) [G06F 9/54 (2013.01); G06F 21/105 (2013.01); G06F 21/33 (2013.01); H04L 9/3213 (2013.01); H04L 9/3239 (2013.01); H04L 9/3247 (2013.01); H04L 63/0442 (2013.01); H04L 63/0815 (2013.01); H04L 63/126 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method for authenticating a distributed computing resource of a requesting entity to access a resource or a service of a resource server, the method comprising:
receiving, by the resource server, a token including one or more entitlements for the requesting entity from an access management server;
decrypting, by the resource server, a digital signature appended to the token to obtain a previously-generated hash value of the token;
generating, by the resource server, a new hash value of the token;
determining, by the resource server, whether the previously-generated hash value of the token matches the new hash value of the token; and
locally caching, by the resource server, the token and the one or more entitlements, based on determining that the previously-generated hash value of the token matches the new hash value of the token.