Dynamic authentication and authorization mechanisms

Abstract

A computing system architecture includes a token generator communicable with a client token agent. The client token agent is communicable with a client database access agent. A database management system is communicable with the token agent. The database management system is communicable with the client database access agent. A client authorization management system is communicable with the database management system. The client authorization management system stores a list of authorized operations for a client. The list of authorized operations is configured to be changeable during a client login session.

What is claimed is: 
     
         1 . A computing system architecture, comprising
 a token generator communicable with a client token agent, the client token agent being communicable with a client database access agent;   a database management system communicable with the token agent, the database management system being communicable with the client database access agent; and   a client authorization management system communicable with the database management system, the client authorization management system storing a list of authorized operations for a client,   wherein the list of authorized operations is configured to be changeable during a client login session.   
     
     
         2 . The computing system architecture according to  claim 1 , wherein
 a token is generated for the client login session, the client is being required to provide the token to the database management system at the time of login for authentication.   
     
     
         3 . The computing system architecture according to  claim 2 , wherein
 the token is associated with the list of authorized operations.   
     
     
         4 . The computing system architecture according to  claim 2 , wherein
 The database management system confirms whether the client is authorized to perform each and every requested operation requested during a single client login session.   
     
     
         5 . The computing system architecture according to  claim 2 , wherein the token is generated based on, at least partially, an IP address, a time, a random text string, a random number, and a database access agent. 
     
     
         6 . The computing system architecture according to  claim 2 , wherein the token includes a first portion generated based on an IP address, a second portion based on a time, and a third portion based on a random text string. 
     
     
         7 . The computing system architecture according to  claim 6 , wherein the token includes a fourth portion generated based on a random number, and fifth portion generated based on a database access agent. 
     
     
         8 . The computing system according to  claim 1 , wherein the database management system has a processor, the processor performs:
 receiving a request form a client for a service;   providing the startup page of the service;   receiving user ID and password for a login; and   authenticating the login, if the user ID and the password match a record.   
     
     
         9 . The computing system according to  claim 8 , wherein the processor performs:
 providing a token to the client; and   receiving an operation request with the token.   
     
     
         10 . The computing system according to  claim 9 , wherein the processor performs:
 determining whether the operation is authorized by checking the list of authorized operations for a client; and   granting the operation if the operation is authorized.   
     
     
         11 . A computing system architecture, comprising
 a token generator communicable with a client token agent, the client token agent being communicable with a client database access agent;   a database management system communicable with the token agent, the database management system being communicable with the client database access agent; and   a client authorization management system communicable with the database management system, the client authorization management system storing a list of authorized operations for a client,   wherein the list of authorized operations is configured to be changeable during a client login session,   wherein a token is generated for the client login session, the client is being required to provide the token to the database management system at the time of login for authentication.   
     
     
         12 . The computing system architecture according to  claim 1 , wherein
 the token is associated with the list of authorized operations.   
     
     
         13 . The computing system architecture according to  claim 1 , wherein
 The database management system confirms whether the client is authorized to perform each and every requested operation requested during a single client login session.   
     
     
         14 . The computing system architecture according to  claim 1 , wherein the token is generated based on, at least partially, an IP address, a time, a random text string, a random number, and a database access agent. 
     
     
         15 . The computing system architecture according to  claim 1 , wherein the token includes a first portion generated based on an IP address, a second portion based on a time, and a third portion based on a random text string. 
     
     
         16 . The computing system architecture according to  claim 15 , wherein the token includes a fourth portion generated based on a random number, and fifth portion generated based on a database access agent. 
     
     
         17 . The computing system according to  claim 1 , wherein the database management system has a processor, the processor performs:
 receiving a request form a client for a service;   providing the startup page of the service;   receiving user ID and password for a login; and   authenticating the login, if the user ID and the password match a record.   
     
     
         18 . The computing system according to  claim 8 , wherein the processor performs:
 providing a token to the client; and   receiving an operation request with the token.   
     
     
         19 . The computing system according to  claim 9 , wherein the processor performs:
 determining whether the operation is authorized by checking the list of authorized operations for a client; and   granting the operation if the operation is authorized.   
     
     
         20 . The computing system according to  claim 9 , wherein the processor performs:
 denying the operation if the operation is not authorized.