Patent ID: 7234060
Filing Date: 2007-06-19
Classification: G06F,H04L

Abstract:
1. A computer program product for use with a client-server computer network, the network comprising a set of server computers and a set of client computers, said computer program product comprising a computer usable medium having computer readable program code embodied in said medium for providing authentication of cookies, said computer program product comprising: a. computer readable program code operative to enable one or more of the set of client computers to provide client-identifying data to one or more of the set of server computers, b. computer readable program code operative to provide a unique server-identifier for each one of the set of server computers, c. computer readable program code operative to enable each one of the set of server computers to request a private key and an associated public key from a public key encryption system, d. computer readable program code operative to enable each one of the set of server computers to store the requested private key in a dynamic memory device on the server computer, only, e. computer readable program code operative to enable each one of the set of server computers to store the requested public key in a database available to the set of server computers, and to associate the stored public key requested by the server computer with the unique server-identifier for the server computer, f. computer readable program code operative to enable each one of the set of server computers to generate cookies for one or more of the set of client computers, each generated cookie comprising data corresponding to the client-identifying data provided by the one or more of the set of client computers and comprising the value of the server-identifier assigned to the generating server, g. computer readable program code operative to enable each one of the set of server computers to generate an encrypted digital signature for each generated cookie using the requested private key stored in dynamic memory on the server computer, h. computer readable program code operative to enable each one of the set of server computers to forward cookies and their associated encrypted digital signatures to the client computers corresponding to the identifying data provided, i. computer readable program code operative to enable each one of the set of server computers to receive cookies with encrypted digital signatures from one or more of the set of client computers, and j. computer readable program code operative to enable each one of the set of server computers to extract server-identifying data from received cookies to retrieve associated public keys from the database for use in decrypting digital signatures for received cookies and thereby to authenticate the said cookies.