Patent ID: 7233997
Filing Date: 2007-06-19
Classification: G06F,H04L

Abstract:
1. A method of operating an authenticating server system for authenticating a user of a client application provided on a client terminal having no unique IP address via a data communications network, the server system being arranged to control access to a document stored on a resource server connected to said data communications network, said method comprising performing the following steps in said server system: receiving at the resource server a request for said document generated by said client application provided on the terminal having no unique IP address; evaluating at the resource server client-side persistent information accompanying said request including: checking if the client-side persistent information contains an address token previously issued by the resource server which uniquely identifies the user, and performing the following steps at the resource server: i) if no address token which uniquely identifies the user is contained in the client-side persistent information accompanying said request: ii) if an address token is received which accompanies user authentication data, using said address token to uniquely re-identify the address of the terminal from which the original document request was received; iii) if an address token which uniquely identifies the user is contained in the client-side persistent information accompanying said request and the address token is a validated address token, using said validated address token to enable said resource server to validate said request for said document by checking if said stored access status for said user includes access to said document.