Patent ID: 8973118
Filing Date: 2015-03-03
Classification: G06F,H04L

Abstract:
1. A method, comprising: at a server computing device hosting a web service, receiving through a communication network from a client executing at a user device, a request message requesting access to a particular function from among a plurality of functions offered by the web service, the request message including a function identifier identifying the particular function and a security token, extracting the function identifier from a portion of the request message different from a further portion including the security token; extracting the authentication information for the client from the security token; validating the security token based on an expiration date of the security token and a source communication address flag, wherein the expiration date and the source communication address flag are included within the security token, and wherein the source communication address flag causes the server to verify a source Internet Protocol (IP) address of the request message as a part of validating the security token; and in response to the validation of the security token, validating the function identifier by directly identifying the function identifier in a list of allowable functions stored in a database of the server; authenticating the client based on the authentication information for the client extracted from the security token; and upon successfully validating the security token and the function identifier, and upon successfully authenticating the client in accordance with the authentication information extracted from the security token: