Patent ID: 9122865
Filing Date: 2015-09-01
Classification: G06F

Abstract:
1. A method for establishing user credentials of a service on a computer network by an identity server, comprising the steps of: receiving from a requesting software application a request for new credentials for an electronic mail address; generating a single use mail token, wherein the mail token is to ensure that the user has access to the electronic mail address; recording the mail token and a single use private token, wherein the private token is to ensure that the credentials are issued to the requesting software application; sending the private token to the requesting software application; sending a verification message to said electronic mail address including a verification link for credentials and the mail token generated in said generating step; receiving a request for verification of said electronic mail address through said verification link, wherein the request for verification includes both a mail token and a private token transmitted by the requesting software application; verifying the request for verification including verifying that the mail token and the private token received from said requesting software application are still active and match the mail token and the private token recorded in said recording step; responsive to determining that the private token and the mail token are no longer active or that the mail token and the private token do not match the mail token and the private token recorded in said recording step, refraining from issuing the credentials; responsive to determining the private token and the mail token are still active and match the mail token and the private token received from said electronic mail address, issuing and sending the new credentials to the requesting software application, wherein said method further comprises the step of disabling the private token and the mail token after determining that the private token and the mail token are still active, to prevent re-use of the private token and the mail token.