Information security – Access control or authentication – Network
Reexamination Certificate
2011-06-21
2011-06-21
Chai, Longbit (Department: 2431)
Information security
Access control or authentication
Network
C726S027000, C726S028000, C726S029000, C726S030000, C713S169000, C713S170000, C713S171000, C713S172000, C713S173000
Reexamination Certificate
active
07966652
ABSTRACT:
The present invention provides a method that allows the MashSSL protocol to be used to provide a secure and efficient way for delegated authentication. The invention allows services which already have an SSL infrastructure to reuse that infrastructure for delegated authentication, and to do so in a fashion where the cryptographic overhead is amortized across multiple users, and which provides the user with greater control of what information is shared on their behalf.
REFERENCES:
patent: 5315658 (1994-05-01), Micali
patent: 5657390 (1997-08-01), Elgamal et al.
patent: 6141750 (2000-10-01), Micali
patent: 6212635 (2001-04-01), Reardon
patent: 6367009 (2002-04-01), Davis et al.
patent: 7020688 (2006-03-01), Sykes, Jr.
patent: 7318238 (2008-01-01), Elvanoglu et al.
patent: 7651677 (2010-01-01), Strohmaier et al.
patent: 2003/0140226 (2003-07-01), Yamamoto et al.
patent: 2003/0182423 (2003-09-01), Shafir et al.
patent: 2004/0103283 (2004-05-01), Hornak
patent: 2005/0086197 (2005-04-01), Boubez et al.
patent: 2006/0080352 (2006-04-01), Boubez et al.
patent: 2007/0289006 (2007-12-01), Ramachandran et al.
patent: 2008/0046984 (2008-02-01), Bohmer et al.
Mark Atwood “OAuth Core 1.0 Specification”—Dec. 4, 2007.
SSL-over-SOAP: Towards a Token-based Key Establishment Framework for Web Services, Sebastian Gajek, Lijun Liao, Bodo Möller and Jörg Schwenk, IEEE ECOWS Workshop on Emerging Web Services Technology (WEWST'07), Halle (Germany), 2007.
BBauth. Yahoo! Browser Based Authentication. http://developer.yahoo.com/auth/.
OAuth: An open protocol to allow secure API authentication in a simple and standard method from desktop and web applications. http://oauth.net/.
Chai Longbit
Emery David P.
Safemashups Inc.
Sughrue & Mion, PLLC
LandOfFree
Mashauth: using mashssl for efficient delegated authentication does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Mashauth: using mashssl for efficient delegated authentication, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Mashauth: using mashssl for efficient delegated authentication will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-2698697