US 12,452,228 B2
Technologies for token-based authentication and authorization of distributed computing resources
Scott Edward Blasi, Littleton, CO (US)
Assigned to Worldpay, LLC, Symmes Township, OH (US)
Filed by Worldpay, LLC, Symmes Township, OH (US)
Filed on Jun. 28, 2023, as Appl. No. 18/343,188.
Application 18/343,188 is a continuation of application No. 17/895,664, filed on Aug. 25, 2022, granted, now 11,736,467.
Application 17/895,664 is a continuation of application No. 17/154,814, filed on Jan. 21, 2021, granted, now 11,463,427, issued on Oct. 4, 2022.
Application 17/154,814 is a continuation of application No. 16/456,245, filed on Jun. 28, 2019, granted, now 10,931,657, issued on Feb. 23, 2021.
Application 16/456,245 is a continuation of application No. 16/010,869, filed on Jun. 18, 2018, granted, now 10,382,425, issued on Aug. 13, 2019.
Application 16/010,869 is a continuation of application No. 15/162,936, filed on May 24, 2016, granted, now 10,044,701, issued on Aug. 7, 2018.
Prior Publication US 2023/0353552 A1, Nov. 2, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 29/06 (2006.01); G06F 9/54 (2006.01); G06F 21/10 (2013.01); G06F 21/33 (2013.01); H04L 9/32 (2006.01); H04L 9/40 (2022.01)
CPC H04L 63/0807 (2013.01) [G06F 9/54 (2013.01); G06F 21/105 (2013.01); G06F 21/33 (2013.01); H04L 9/3213 (2013.01); H04L 9/3239 (2013.01); H04L 9/3247 (2013.01); H04L 63/0442 (2013.01); H04L 63/0815 (2013.01); H04L 63/126 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A method for authenticating a distributed computing resource of a requesting entity to access a resource or a service of a resource server, the method comprising:
receiving, by the resource server, a token including one or more entitlements for the requesting entity from an access management server;
decrypting, by the resource server, a digital signature appended to the token to obtain a previously-generated hash value of the token;
generating, by the resource server, a new hash value of the token;
locally caching, by the resource server, the token and the one or more entitlements, based on determining that the previously-generated hash value of the token matches the new hash value of the token;
determining, by the resource server, that the requesting entity is authorized to access the resource or the service of the resource server, based on the token and the one or more entitlements that are locally-cached by the resource server; and
granting, by the resource server, access to the resource or the service of the resource server, based on determining that the requesting entity is authorized to access the resource or the service of the resource server.