Patent ID: 9276933
Filing Date: 2016-03-01
CPC Classification: G06F,H04L

Claim Text:
1. A method comprising: receiving, by a client device, a security token from an authentication server based on user credentials submitted to the authentication server; sending, by the client device, the security token to an application server; verifying, by the application server, the security token with the authentication server and determining whether to allow or deny access to the client device based on the security token verification; determining, by the application server, a disposition of the security token based on whether the received security token is a single-use token or a multiple-use token; associating, by the application server, the security token with a corresponding cache table based on the determined disposition of the token; caching, by the application server, the security token based on the associated cache table; determining a time-expiry algorithm for the cache table based on the cached security token, the disposition of the security token, and associated cache table, and wherein the time-expiry algorithm determines a timeout interval for the security token and the timeout interval is longer for a single-use token than the timeout interval for a multiple-use token; and managing the cache table based on the determination of the time-expiry algorithm.