Patent ID: 8006300
Filing Date: 2011-08-23
Classification: G06F,H04L

Abstract:
1. An interactive, computer implemented method for execution by server side computer resources in a client-server system to authenticate a client having access to a first data processing machine and a second data processing machine, comprising: connecting via a first communication channel to the first data processing machine; receiving an input client identifier from the first data processing machine via one or more data communications on the first communication channel; verifying the input client identifier, and after said verifying, providing a session authentication credential comprising a plurality of storage elements to the client via one or more data communications on the first communication channel, the session authentication credential usable for only one authentication session; connecting via a second communication channel to the second data processing machine; providing a session authentication challenge to the second data processing machine via one or more data communications on the second communication channel, the session authentication challenge identifying a random subset of the plurality of storage elements in the session authentication credential; accepting an authentication response, after the session authentication credential has been provided to the client, from the first data processing machine via one or more data communications on the first communication channel, the authentication response comprising a code based on a cognitive association between the subset identified in the session authentication challenge and the session authentication credential, and does not include all of the session authentication credential; and determining whether the authentication response matches the subset of the session authentication credential identified by the session authentication challenge.