Method for verifying the identity of a user for session authentication purposes during Web navigation
US7225464B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Apr 3, 2002 |
| Grant date | May 29, 2007 |
| Priority date | — |
| Expiry date | Jun 23, 2024 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L67/14
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A network-based software application for enabling remote authentication of a user during a network session has a server portion for serving session validation information and additional user information when queried, a client portion for configuring and submitting parameters constraining what and how data is to be shared with a querying entity or entities, and a distributed portion for distribution and application at various connected network nodes for enabling those nodes to recognize and interact with the server portion. The application is characterized in that the server portion generates a temporary session token after a first successful authentication by the user at a web site during a network session, the token cached at the host machine of the server portion and at the user's machine or proxy machine and wherein upon navigation by the user to a next web site or form requiring secure authentication, the token is used to identify the user and a remote call is used to validate the user session instead of requiring manual authentication procedures.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.