US 12,132,837 B2
System and method for a token gateway environment
Alpa Modi Jain, Laguna Niguel, CA (US); Praveen Kumar Soni, Costa Mesa, CA (US); and Frederic Vander Elst, London (GB)
Assigned to Experian Information Solutions, Inc., Costa Mesa, CA (US)
Filed by Experian Information Solutions, Inc., Costa Mesa, CA (US)
Filed on Jan. 12, 2023, as Appl. No. 18/153,587.
Application 18/153,587 is a continuation of application No. 17/123,568, filed on Dec. 16, 2020, granted, now 11,588,639.
Application 17/123,568 is a continuation of application No. 16/051,339, filed on Jul. 31, 2018, granted, now 10,911,234, issued on Feb. 2, 2021.
Claims priority of provisional application 62/688,887, filed on Jun. 22, 2018.
Prior Publication US 2023/0421376 A1, Dec. 28, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/32 (2006.01); H04L 9/08 (2006.01); H04L 9/40 (2022.01)
CPC H04L 9/3213 (2013.01) [H04L 9/0894 (2013.01); H04L 9/3247 (2013.01); H04L 63/0428 (2013.01); H04L 63/08 (2013.01); H04L 63/10 (2013.01); H04L 63/0807 (2013.01); H04L 63/0815 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for providing tokens to facilitate authentication and access to protected resources, the system comprising:
a token gateway computing system in electronic communication with a user computing system, at least one access management computing system, and a protected resource computing system, wherein the token gateway computing system is configured to:
receive, from the user computing system, a first data packet including user credentials of a user and a request for an authentication token to access one or more protected resources from the protected resource computing system;
transmit a second data packet to the at least one access management computing system based on a type associated with the one or more protected resources requested;
receive, from the at least one access management computing system, validation of the user, and private data;
generate a first token;
generate a second token using the private data, wherein the second token comprises a first portion of the first token and additional data, and wherein the first token and the second token are based on a JavaScript Object Notation (JSON) web token standard;
transmit the first token to the user computing system;
receive, from the user computing system, a request to access one or more protected resources from the protected resource computing system, the request comprising the first token;
validate the received first token; and
transmit the second token to the protected resource computing system.