Patent ID: 8239926
Filing Date: 2012-08-07
Classification: G06F,H04L,H04W

Abstract:
1. A method performed by a data processing apparatus, comprising: receiving, at a server, a personal cookie from a client executing an application that requires explicit permission to obtain a cookie containing a user ID, wherein an encrypted first data representing said user ID is included in said personal cookie, and said personal cookie may be used to obtain other cookies; obtaining said user ID from said personal cookie by decrypting said encrypted first data included in said personal cookie and extracting said user ID from said decrypted first data; verifying said user ID to be authentic; encrypting said user ID obtained from said personal cookie and including said encrypted user ID obtained from said personal cookie in a limited ID cookie; wherein said limited ID cookie is a cookie encrypted by said server, said limited ID cookie may be decrypted only by said server, and second data representing an encrypted form of said user ID is included in said limited ID cookie; and sending said limited ID cookie with said encrypted form of said user ID to said client; wherein said limited ID cookie also includes user information indicating that use of said limited ID cookie for a particular purpose is permitted; wherein said personal cookie further includes encrypted third data representing a social networking login account.