Patent ID: 7769998
Filing Date: 2010-08-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method to authenticate and authorize a user, the method comprising: receiving a request for authentication and authorization of the user, from a client computer, via a secondary site on behalf of the user, the user seeking permission to access a primary site via the secondary site, via a computer network, wherein the request includes user information corresponding to the user; verifying the user information for authenticity, wherein the verifying of the user information includes determining whether the user satisfies authentication and authorization criteria, defined by the primary site; based on the determining that the user satisfies the authentication and authorization criteria, generating a token associated with the user using an authenticator residing at the primary site to authenticate and authorize the user; transmitting a portion of the token from the primary site, the portion of the token to be stored at the secondary site on behalf of the user to permit the user, from the client computer, to access the primary site via the secondary site, via the computer network; and storing another portion of the token at the primary site to match with the portion of the token at the secondary site to allow the user multiple future accesses to the primary site via the secondary site.