SYSTEMS AND MECHANISM TO CONTROL THE LIFETIME OF AN ACCESS TOKEN DYNAMICALLY BASED ON ACCESS TOKEN USE

摘要

A data management system manages secured data for a pluralityof users. The data management system utilizes an access authorizationsystem to authenticate users seeking access to the data managementsystem. The access authorization system provides access tokens toauthenticatedusers. The access tokens enable the authenticated users to access thedata management system without again providing authentication data. Theaccess authorization system includes, for each user, an access policy thatgoverns whether the users can use the access tokens to access the datamanagementsystem. The access tokens have a finite lifetime. If the users usethe access tokens within the finite lifetime and if the users satisfy all oftheaccess rules of the access policies, then the lifetime of the access tokenscanbe extended a finite number of times.