A communication authorization method, comprising: receiving, by a third party server from a client, a request for access information to access content; generating, by the third party server, the access information and session rights to access the desired content from a first application server; generating, by the third party server, authentication data associated with the access information and the session rights using a first service ticket wherein the first service ticket is obtained from a key distribution center, KDC, and the KDC is a separate entity from the first application server, wherein the authentication data allows the first application server to determine whether the access information was generated by the third party server; sending, by the third party server, the access information, the session rights and the authentication data to the client, whereby the client presents the access information, the session rights and the authentication data to the first application server to be authorized to receive the desired content from the first application server; the method further comprising: the first application server receiving a key request from the client, the key request including the access information, the session right and the authentication data; extracting, by the first application server, the access information, the session rights and the authentication data; verifying, by the first application server, the access information, the session rights and the authentication data using the first service ticket; and issuing, by the first application server, a key reply if the access information, the session rights and the authentication data are verified. receiving, by a third party server from a client, a request for access information to access content; generating, by the third party server, the access information and session rights to access the desired content from a first application server; generating, by the third party server, authentication data associated with the access information and the session rights using a first service ticket wherein the first service ticket is obtained from a key distribution center, KDC, and the KDC is a separate entity from the first application server, wherein the authentication data allows the first application server to determine whether the access information was generated by the third party server; sending, by the third party server, the access information, the session rights and the authentication data to the client, whereby the client presents the access information, the session rights and the authentication data to the first application server to be authorized to receive the desired content from the first application server; the method further comprising: the first application server receiving a key request from the client, the key request including the access information, the session right and the authentication data; extracting, by the first application server, the access information, the session rights and the authentication data; verifying, by the first application server, the access information, the session rights and the authentication data using the first service ticket; and issuing, by the first application server, a key reply if the access information, the session rights and the authentication data are verified. the first application server receiving a key request from the client, the key request including the access information, the session right and the authentication data; extracting, by the first application server, the access information, the session rights and the authentication data; verifying, by the first application server, the access information, the session rights and the authentication data using the first service ticket; and issuing, by the first application server, a key reply if the access information, the session rights and the authentication data are verified.