Patent ID: 7137006

Claim:
A computer-implemented method of single sign-on user access to multiple web servers, comprising: authenticating a user by a first web server, the first web server also providing a first type of service session functionality for the user in addition to and different from authenticating the user, creating an encrypted authentication token, and redirecting a web browser of the user to transmit the encrypted authentication token, which first type of service session functionality is also different from a second type of service session functionality provided for the user by a second web server that is not provided by the first web server, which second type of service session functionality is also in addition to and different from authenticating the user, creating an encrypted authentication token and redirecting a web browser of the user to transmit the encrypted authentication token, each of said web servers containing information identifying the type of service session functionality provided by the other of said web servers and an address for the other of said web servers; detecting a client request for the second type of service session functionality for the user at said first web server that is not provided by the first web server, said first web server, for determining the second web server providing the second type of service session functionality for the user and in response thereto creating an encrypted authentication token related to the user and redirecting a web browser of the user to the second web server; transmitting the encrypted token from the first web server to the second web server via the user's web browser, wherein the authentication token comprises an expiration time and is digitally signed by the first web server; authenticating the authentication token by the second web server; and providing the second type of service session functionality for the user to conduct a session by the second web server.