Patent ID: 8019881

Claim:
A key cookie, said key cookie being a secure cookie comprising: a) a domain field capable of holding domain data to associate said key cookie to a domain where said key cookie is valid; b) at least one name field capable of holding name data; c) at least one value field capable of holding value data derived from conforming client data; d) an expiration field capable of holding cookie expiration data; and e) an encrypted session key, said encrypted session key capable of being used for encrypting said value data contained in another of said at least two secure cookie; and wherein: 1. said key cookie is created for use in transferring secure data between a client and a server; 2. said client capable of presenting said conforming client data; 3. said server capable of using said conforming client data to create at least two of said secure cookie; 4. at least one of said at least two secure cookie capable of being transported between said server and said client over a network; 5. at least one of said at least two secure cookie capable of being stored in a client storage; and 6. said client capable of being authenticated by a secure attribute service between said client and said server, said secure attribute service capable of comparing said conforming client data with said value data when authenticating said client.