Patent ID: 8832787

Claim:
A method of leveraging an established authenticated session in obtaining authentication to an application, the method comprising: receiving, at an application server system, an application token sent, over a network, by an access device as part of a request to establish an authenticated session with the application server system, the application token being specific to the application server system and being generated by a token generating system in response to a request from the access device, the token generating system generating the token by leveraging a persistent authenticated session established between the access device and another application server system, and the token generating system being different from the access device and the application server system; validating, by the application server system, the application token, the validation being performed by the application server based on the application token and without requiring communication between the application server system and the token generating system after receipt of the application token; and in response to the application validating the application token, establishing, by the application server system, an authenticated session with the access device.