Back-end constrained delegation model

US9118672B2 · kind B2 · utility

Assignee

• MICROSOFT TECHNOLOGY LICENSING, LLC · US

Inventors

• Mark F. Novak · Newcastle, US
• Paul J. Leach · Seattle, US
• Liqiang Zhu · Shanghai, CN
• Paul J. Miller · Albuquerque, US
• Alexandru Hanganu · Sammamish, US
• Yi Zeng · Redmond, US
• Jeremy D. Viegas · Redmond, US
• K. Michiko Short · Renton, US

Key dates

• Filing date: Dec 10, 2010
• Grant date: Aug 25, 2015
• Expiry date: Sep 29, 2031

Classification

• Technology area (CPC H): Electricity
• CPC primary: H04L63/0807
• WIPO field: Digital communication
• WIPO sector: Electrical engineering

Abstract

A client can communicate with a middle tier, which can then, in turn, communicate with a back end tier to access information and resources on behalf of the client within the context of a system that can scale well. Each individual back end can establish a policy that defines which computing device can delegate to that back end. That policy can be enforced by a domain controller within the same administrative domain as the particular back end. When a middle tier requests to delegate to a back end, the domain controller to which that request was directed can either apply the policy, or, if the domain controller is in a different domain than the targeted back end, it can direct the middle tier to a domain controller in a different domain and can sign relevant information that the middle tier can utilize when communicating with that different domain controller.