Patent ID: 6801998
Filing Date: 2004-10-05
Classification: H04L

Abstract:
A method for providing access to a resource in a network, said network including a client, an application server, and a group membership server, said method comprising:at said application server: receiving a request for service from an applicant associated with said client; in response to receiving said request for service, generating a first message portion that includes an identification of a group authorized to perform said service; encrypting said first message portion to form an encrypted first message portion that permits decryption by said group membership server, but not by said client; and transmitting said encrypted first message portion over said network for delivery to said client; at said group membership server: receiving said encrypted first message portion from said client; decrypting said encrypted first message portion; if said applicant is a member of said group identified by the first message portion thereby decrypted, generating a response message portion containing an indication that said applicant is a member of said group; transmitting said response message portion over said network for delivery to said client; and at said application server: in response to receiving said response message portion from said client, performing said requested service.