Patent ID: 8943571
Filing Date: 2015-01-27
Classification: G01S,H04L,H04W

Abstract:
1. A method for protecting a single sign-on domain, comprising: providing, by an authentication server, an authentication cookie to a user browser client, wherein the authentication cookie has at least one user authentication credential for the single sign-on domain, and is associated with an authentication subdomain of the single sign-on domain; receiving, by the authentication server, the authentication cookie in an access request from the user browser client, wherein the access request is based on a redirection received by the user browser client from a content server within the single sign-on domain in response to a content request from the user browser client; upon authentication of the user authentication credential in the received authentication cookie, responding, by the authentication server, to the access request by forwarding, to the user browser client, a limited-use cookie for the single sign-on domain; receiving, by the authentication server, a request from the content server to validate a session identifier of the limited-use cookie, wherein the content server received the limited-use cookie from the user browser client; upon validation of the session identifier of the limited-use cookie, providing, by the authentication server, a valid session message to the content server for enabling the content server to forward requested content to the user browser client and upon validation of the session identifier of the limited-use cookie, invalidating, by the authentication server, the limited-use cookie to prohibit further use of the limited-use cookie.