Patent ID: 9059985
Filing Date: 2015-06-16
Classification: H04L

Abstract:
1. A computerized-method of validating a client user in a secured network, the method comprising: receiving, by a first server computing device, a first request from a client to login to a protected domain of the first server, the first request including user login credentials and a first set of verification data, the first set of verification data recorded by the client at the time the login credentials were entered; determining, by the first server computing device, whether the login credentials are recognized; transmitting, by the first server computing device, a first cookie to the client, the first cookie including the login credentials and a second set of verification data, the second set of verification is a subset or derived from the first set of verification data; and transmitting, by the first server computing device, a second cookie to the client, the second cookie including a third set of verification data that is sufficient to confirm the first cookie; receiving, by a second server computing device, a second request to gain access to a protected resource of the protected domain, the second request including the first cookie and a fourth set of verification data; determining, by the server computing device, whether the second request was transmitted by the client associated with the first cookie based on the first cookie and the fourth set of verification data; if the second request was transmitted by the client associated with the first cookie, allowing access to the protected resource of the protected domain; and if the second request was not transmitted by the client associated with the first cookie, denying access to the protected resource of the protected domain or redirect the user to reenter login credentials; determining, by the second server computing device, whether the first cookie passes a first level review; and if the first cookie does not pass a first level review, then determining, by the first server computing device, whether the first cookie passes a second level review, wherein the first level review comprises determining, by the second server computing device, whether a first IP included in the second set of verification data is equal to a second IP address included in the fourth set of verification data, and the second level review comprises: performing, by the first server computing device, a risk based analysis based on the subset of the first set of verification data in the first cookie and the fourth set of verification data, and determining, by the first server computing device, whether the output of the risk based analysis is sufficient to allow access to the requestor.