DÉRIVATION DE CLÉ BASEÉ SUR PARAMÈTRES ET DÉLÉGATION D'ACCÈS AUX RESSOURCES

摘要

A computer-implemented method for delegating access to a computing resource from a delegator to a first delegate is provided. The method comprises: receiving, at a service, a delegation request from the delegator; generating, in the service, a session key based at least in part on: (a) an encoding of one or more restrictions on the session key, such restrictions being based on e.g. geography, time, user identity and/or service; and (b) a secret credential; providing the session key to the delegator, from the service; receiving, at the service, from the first delegate, a first access request to access the computing resource, the first access request including the session key or a session key identifier; verifying the first access request based at least in part on the session key; and granting, to the first delegate, access to the computing resource subject to the one or more restrictions on the session key.