Patent ID: 7475252
Filing Date: 2009-01-06
Classification: G06F,H04L

Abstract:
1. A method for authenticating a user of a client computer to a remote server computer, said method comprising the steps of: inputting, by said user, a userID and a corresponding password into said client computer, wherein said userID is separate and distinct from said corresponding password; said client computer initially sending said userID but not said corresponding password of said user to said remote server computer for authentication of said user; in response to receipt of said userID without said corresponding password, said remote server computer determining a subsequent time window during which said remote server computer will consider for authentication submission of a combination of said userID and said corresponding password, and said remote server computer subsequently notifying said client computer of said time window determined, wherein said remote server computer determines a start time of said time window based on a randomly generated number between two and ten seconds after receipt of said userID from said client computer, and wherein said remote server initializes a count value corresponding to a number of login attempts received for said userID within said time window determined; after receipt of said notification from said remote server computer and during said time window determined, said client computer sending said userID and said corresponding password inputted by said user to said remote server computer; and in response to receipt of said userID and said corresponding password from said client computer, said remote server computer determining if said combination of said userID and said corresponding password is valid and within a preset limit number of login attempts established for said userID.