US 12,463,815 B2
Systems and methods for intelligently constructing, transmitting, and validating spoofing-conscious digitally signed web tokens using microservice components of a cybersecurity threat mitigation platform
Matthew Blasius, Grand Prairie, TX (US)
Assigned to Expel, Inc., Herndon, VA (US)
Filed by Expel, Inc., Herndon, VA (US)
Filed on Jun. 13, 2024, as Appl. No. 18/742,399.
Application 18/742,399 is a continuation of application No. 18/545,552, filed on Dec. 19, 2023, granted, now 12,052,364.
Application 18/545,552 is a continuation of application No. 18/226,645, filed on Jul. 26, 2023, granted, now 11,895,238, issued on Feb. 6, 2024.
Claims priority of provisional application 63/415,020, filed on Oct. 11, 2022.
Claims priority of provisional application 63/398,001, filed on Aug. 15, 2022.
Prior Publication US 2024/0333508 A1, Oct. 3, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 9/32 (2006.01)
CPC H04L 9/3213 (2013.01) [H04L 9/3247 (2013.01); H04L 9/40 (2022.05)] 18 Claims
OG exemplary drawing
 
1. A method comprising:
identifying, via an authentication service, a target entity that corresponds to an application programing interface (API) request based on authentication data included in the API request;
obtaining, via an authorization service, a set of permissions that the target entity is allowed to perform within an online service;
generating, at the authorization service, a protobuf web token based on (i) the target entity and (ii) the set of permissions associated with the target entity, wherein generating the protobuf web token includes:
generating a header object, wherein generating the header object includes encoding the header object based on a protobuf-header encoding protocol defined by the authorization service, wherein the header object, when encoded, includes instructions for a downstream service or downstream component of the online service to decode and validate the protobuf web token, and
serializing, via a serialization algorithm, the header object into a serialized header byte array;
adapting the API request to an adapted API request based on generating the protobuf web token, wherein the adapted API request includes the protobuf web token; and
executing, via a network, the adapted API request based on an API-processing service receiving the adapted API request.