Patent ID: 8819803
Filing Date: 2014-08-26
Classification: H04L,H04W

Abstract:
1. A method for use in validating association of client devices with authenticated clients, the method comprising: receiving an authentication request from a client device used by a client for authenticating the client for establishing a session with a server; authenticating the client, by an authentication device, wherein the client is authenticated by creating a first authentication token and providing the first authentication token to the client; receiving a second authentication token from the client device for accessing the server; gathering identification information of the client device, wherein the identification information identifies the client device; evaluating the identification information gathered from the client device, wherein evaluating the identification information includes performing risk analysis by an adaptive authentication logic; and based on the evaluation, validating that the identification information of the client device providing the second authentication token to the server corresponds to a client device that has been associated with the authenticated client and the second authentication token is same as the first authentication token that has previously been created for the authenticated client during authentication of the client.