Patent ID: 8332920

Claim:
A method for authentication in a system having a client application, a server application, a resource location, an authenticated primary communication channel between the client application and the resource location, and an authenticated primary communication channel between the server application and the resource location, the method comprising: creating a secondary communication channel with the server application, submitting a request to the server application for granting access by way of the secondary communication channel, granting access to the client application by way of the secondary communication channel when the authentication has been successful, initiating generation of an authentication token to be stored at the resource location, the authentication token being accessible to the client application by way of the authenticated primary communication channel between the client application and the resource location, retrieving the authentication token from the resource location by way of the authenticated primary communication channel between the client application and the resource location, returning the authentication token to the server application by way of the secondary communication channel, authenticating the client application by checking that the authentication token returned by the client application to the server application matches the generated authentication token stored at the resource location upon initiation of the server application, and wherein the secondary communication channel has been established before the generated authentication token is stored at the resource location; the resource location is a file system; and, at least one of the authenticated primary communication channel between the client application and the resource location and the authenticated primary communication channel between the server application and the resource location uses an authentication mechanism provided by the operating system services of the file system.