BlackBerry Limited
DELEGATED AUTHORIZATION SERVICE

Abstract:

A method and authorization delegation system for authorizing access to resources or services. The method comprising receiving an authorization request from a resource or service provider, the authorization request based on a request by a requestor for access to a resource or service provided by the resource or service provider; determining identity information for the requestor and an authorizer associated with the authorization request; forwarding the authorization request to the authorizer using the identity information; and sending a notification of authorization to the resource or service provider for access to the requested resource or service, the notification of authorization based on a response to the authorization request from the authorizer and an authorization policy. The authorization delegation system comprising a requestor, a resource or service provider, a delegated authorization service, and an authorizer.