Patent ID: 9277017
Filing Date: 2016-03-01
CPC Classification: H04L

Claim Text:
1. A method implemented in a non-transitory machine-readable storage medium and processed by a device configured to perform the method, comprising: acquiring, by the device, a token for a session between a resource and a principal that is active on a different device, the token acquired directly from the different device during the session by the device, and wherein generating, by a server session manager, the token that includes restrictions for a time to live and a scope of access with respect to the session, and inserting, by the server session manager, the token into the different device where the device acquires the token, and wherein the device is a mobile device operated by the principal; sending, by the device, the token to the server session manager; and establishing, on the device, the session between the resource and the principal and based on actions of the server session manager, and terminating the session on the device and preventing the device from accessing the session and other subsequent sessions when the principal authenticates to the server session manager and deregisters the mobile device for access to the session and the other subsequent sessions.