A framework, which conforms to the OAuth standard, involves a generic OAuth authorization server that can be used by multiple resource servers in order to ensure that access to resources stored on those resource servers is limited to access to which the resource owner consents. Each resource server registers, with the OAuth authorization server, metadata for that resource server, indicating scopes that are recognized by the resource server. The OAuth authorization server refers to this metadata when requesting consent from a resource owner on behalf of a client application, so that the consent will be of an appropriate scope. The OAuth authorization server refers to this metadata when constructing an access token to provide to the client application for use in accessing the resources on the resource server. The OAuth authorization server uses this metadata to map issued access tokens to the scopes to which those access tokens grant access.

Bundled authorization requests

A system and a method for visiting a third party application through a cloud platform are disclosed. The method includes: receiving a cloud platform account and cloud platform password information inputted by a user; searching a stored binding information mapping table according to a third party application selected by the user to obtain the third party application and obtain access information not comprising cleartext password corresponding to the cloud platform account information, and transmitting the access information to the third party application server; and receiving authentication succeed information returned by the third party application server. According to the present disclosure, complexity of user's operations may be reduced when the user logs on frequently and security level of the user for visiting the third party application may be improved.

Method and system for visiting a third party application via a cloud platform

Service profile-specific token attributes and resource server token attribute overriding

Multiple resource servers interacting with single OAuth server

A measure of similarity between an identifier of a sender of the message and each identifier of one or more identifiers of each trusted contact of a plurality of trusted contacts of a recipient of the message is determined. In the event the sender of the message is not any of the trusted contacts but at least one of the measure of similarity between the identifier of the sender of the message and a selected identifier of a selected trusted contact of the plurality of trusted contacts meets a threshold, the message is modified, if applicable, to alter content of a data field that includes an identification of the sender of the message. The data field is one of a plurality of data fields included in a header of the message.

Mitigating communication risk by detecting similarity to a trusted message contact

Method for providing access to private digital content owned by an owner and installed on a content server, wherein a content manager server has a number of clients potentially interested in the private content, the method comprising the following steps performed at a content management server being informed that the owner has installed private content on a content server; obtaining a delegate token from the content server; receiving a query for the private digital content from a client of the number of clients of the content management server; providing said client with a token using the delegate token enabling the client to access the private content.

System and method for accessing private digital content

PeCMan, the Personal Content Manager, is a content access gateway, aggregator, indexing, and sharing tool for all of a user's personally relevant content on the Internet, e.g., all the content a user has created, content that was explicitly shared by others, or publicly available Internet content of specific interest. PeCMan aggregates access to multiple network-based storage systems, services, or other “objects” by their reference. Examples of such objects are photographs, music, e-mail, text documents, or any addressable object on the Internet. The aggregated storage acts as a virtual read-write drive in which PeCMan addresses individual objects by reference, typically encoded in uniform resource locators (URLs). To address content in Web applications such as Google Docs, Flickr, and YouTube, the URL is based on the corresponding application programming interface (API), while content on a user's home machine's disk is addressed via a locally installed software driver supporting Web-based distributed authoring and versioning (WebDAV). This paper describes the motivation, design, and implementation prototype of PeCMan. e 2010 Alcatel-Lucent.

Bart Vrancken

Papers

System and method for accessing private digital content

The personal Internet