Patent ID: 8955068
Filing Date: 2015-02-10
Classification: H04L

Abstract:
1. A computer-implemented method for providing strong authentication for web-based applications, at least a portion of the method being performed by a computing device comprising at least one processor, the method comprising: weaving authentication code comprising aspect-oriented programming code into an existing web-based application at run-time of the existing web-based application such that the authentication code is integrated and stored with the existing web-based application on a same web application server, the authentication code being programmed to modify functionality of the existing web-based application as the existing web-based application executes while leaving a binary of the existing web-based application unchanged; establishing the strong authentication for the existing web-based application by: 1) identifying, at the web application server via the authentication code, a request to bind an authentication credential to a profile of a user by identifying user input requesting to bind the authentication credential to the profile of the user, the request being received via a browser through which the existing web-based application is accessed; 2) directing, at the web application server via the authentication code and in response to the request, the browser to an external authentication site that is not part of the existing web-based application; 3) at the external authentication site, enabling the user to bind the authentication credential to the profile of the user.