Patent ID: 8370914
Filing Date: 2013-02-05
Classification: G06F

Abstract:
1. A method for accessing resources of a server system, the method comprising: sending, by the server system, a first credential request to a passive requestor at a client device; after sending the first credential request, receiving, by the server system, a valid credential for a user of the client device; after receiving the valid credential, providing, by the server system, the passive requestor with access to a first resource of the server system; after providing the passive requestor with access to the first resource, providing, by the server system, an active requestor at the client device with access to a second resource without sending a second credential request to the active requestor, the second resource being the first resource or another resource of the server system, wherein providing the active requestor with access to the second resource comprises: sending, by the server system, a cookie to the passive requestor, the cookie containing a passive security token; receiving an active token request at the server system, the active token request being from the active requestor, the active token request being in a HTTP request that includes the passive security token; in response to receiving the active token request, sending, by the server system, an active security token to the active requestor without sending the second credential request to the active requestor; receiving a passive token request at the server system, the passive token request being from the passive requestor; prior to receiving the passive token request from the passive requestor, receiving a second passive access request at the server system, the second passive access request being from the passive requestor, the second passive access request being an HTTP request whose fulfillment entails accessing the first resource; in response to receiving the second passive access request, sending, by the server system, a second redirection response to the passive requestor, the second redirection response instructing the passive requestor to automatically send the passive token request to the server system; sending, by the server system, a first redirection response to the passive requestor, the first redirection response including the passive security token, the first redirection response instructing the passive requestor to automatically send a first passive access request to the server system; receiving the first passive access request at the server system, the first passive access request from the passive requestor, fulfillment of the first passive access request entailing accessing the first resource, the first passive access request including the passive security token; sending, by the server system, a first passive access response to the passive requestor in response to the first passive access request, the first passive access response including the cookie; wherein the server system is associated with a domain name; wherein receiving the active token request comprises receiving the active token request at a Security Token Server (STS) provided by the server system, the STS associated with a URI that includes the domain name; and wherein receiving the passive token request comprises receiving the passive token request at the STS.