Expel. has been granted a patent for a system that utilizes digitally signed web tokens to securely share sensitive data. The method involves validating authentication data, obtaining permissions for a target entity, and adapting API requests to include a signed token for secure transmission to processing services. GlobalData’s report on Expel gives a 360-degree view of the company including its patenting strategy. Buy the report here.

According to GlobalData’s company profile on Expel, AI-assisted threat classification was a key innovation area identified from patents. Expel's grant share as of July 2024 was 73%. Grant share is based on the ratio of number of grants to total number of patents.

Secure data sharing using digitally signed web tokens

Source: United States Patent and Trademark Office (USPTO). Credit: Expel Inc

The granted patent US12052364B2 outlines a method for processing API requests that include an authorization header with authentication data. The process begins with an API gateway receiving the request, followed by an authentication service that verifies the authenticity of the provided data. Once validated, the method identifies a target entity associated with the authentication data and retrieves a set of permissions that the entity is authorized to perform within a specified online service. A digitally signed protobuf web token is then generated, which includes a header and payload object encoded according to specific protocols. This token is serialized and incorporated into an adapted API request, which is subsequently transmitted to a target API-processing service for automatic handling.

Further claims detail the mechanisms for confirming the authenticity of the authentication data, which may involve comparing it against a repository of valid data, such as API keys. The method also encompasses generating a cryptographic signature for the web token, ensuring its integrity and validity. The patent specifies that the target entity can be a user, API client, or service account, and the permissions may include various read and write capabilities. Additionally, the method allows for the selection of different web tokenization schemes based on characteristics of the target entity or the API request, enhancing the flexibility and security of the authorization process within event detection and response services.

To know more about GlobalData’s detailed insights on Expel, buy the report here.

Data Insights

From

The gold standard of business intelligence.

Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.

GlobalData

GlobalData, the leading provider of industry intelligence, provided the underlying data, research, and analysis used to produce this article.

GlobalData Patent Analytics tracks bibliographic data, legal events data, point in time patent ownerships, and backward and forward citations from global patenting offices. Textual analysis and official patent classifications are used to group patents into key thematic areas and link them to specific companies across the world’s largest industries.