Patent · US Active

Login token management

US11550891B2 · kind B2 · utility

1Cited by
6References
20Claims
0Family size

Assignee

Inventors

Key dates

Filing dateJun 19, 2019
Grant dateJan 10, 2023
Priority date
Expiry dateDec 30, 2040

Classification

  • Technology area (CPC G)Physics
  • CPC primaryG06F2221/2141
  • WIPO fieldComputer technology
  • WIPO sectorElectrical engineering

Abstract

Techniques for securing user data in a healthcare data management system are described. A client system receives a request to authenticate a user. The user is associated with applications and roles. The user is authenticated, at the client system, for all applications and all roles. A login token relating to the authenticated user is maintained at the client system. A role is selected for the user, and an authorization token relating to the selected role is maintained at the client system. A session for the user is initiated. This includes generating an encrypted session cookie relating to the user and the session, storing the encrypted session cookie at the client system, and periodically updating a timestamp for the session cookie.

Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.