US 7,512,782 B2
Method and system for using a web service license
Christopher G. Kaler, Sammamish, Wash. (US); John P. Shewchuk, Redmond, Wash. (US); Giovanni Moises Della-Libera, Seattle, Wash. (US); and Robert George Atkinson, Woodinville, Wash. (US)
Assigned to Microsoft Corporation, Redmond, Wash. (US)
Filed on Aug. 15, 2002, as Appl. No. 10/218,584.
Prior Publication US 2004/0034770 A1, Feb. 19, 2004
Int. Cl. H04L 9/00 (2006.01); G06F 7/04 (2006.01); G06F 7/58 (2006.01); G06F 17/30 (2006.01); H04K 1/00 (2006.01); G06K 15/00 (2006.01); G09F 3/00 (2006.01)
U.S. Cl. 713—155  [726/2; 726/10; 726/26; 705/51; 705/59] 9 Claims
OG exemplary drawing
 
1. A computer-implemented method for implementing a multipurpose license for both authorization and authentication, and which provides flexibility to handle different authentication and authorization purposes and mechanism, the method comprising:
accessing a multipurpose license, the multipurpose license including:
at least one assertion element, wherein each of the at least one assertion elements includes a statement attribute that includes one or more declarative statements describing a key type, and a separate delegate portion identifying one or more conditions under which rights under the multipurpose license can be delegated; and
a plurality of signature elements associated with the at least one assertion element, wherein the plurality of signature elements are from a plurality of different authorities, and wherein each of the plurality of different signature elements includes a reason attribute providing an explicit identification of a reason why the signature element is included in the multipurpose license;
using the at least one assertion element of the multipurpose license for authentication purposes, by verifying an identity of a source of the assertion in the multipurpose license;
using at least one of the signature elements of the multipurpose license for authorization purposes, wherein the multipurpose license is used for a service.