Patent ID: 7458096
Filing Date: 2008-11-25
Classification: H04L

Abstract:
1. A method for providing access services, the method comprising: receiving user session state information for a first user, the user session state information is from an application without a web agent front end, the user session state information is from a cookie stored on a client for the first user, the user session state information is encrypted, and receiving the user session state information includes decrypting the user session state information; receiving a request to authorize the first user to access a first resource, the request to authorize is from the application without a web agent front end; providing authorization services to the application without a web agent front end in an attempt to authorize the first user to access the first resource without requiring the first user to re-submit authentication credentials; receiving a request from the application without a web agent front end for unencrypted data from the user session state information; and providing the unencrypted data from the user session state information to the application without a web agent front end, the application without a web agent front end does not have access to a key to decrypt the user session state information.