Patent ID: 8301876

Claim:
A machine-implemented method, comprising: receiving credentials and a secret from a user via a browser over a network connection; authenticating the credentials and the secret for purposes of establishing a session identifier for a secure session between the user and a secure resource over the network connection; communicating the session identifier to the browser of the user for inclusion with each transaction the user has during the secure session, the secure session having a plurality of transactions; and generating by a client of the user and ensuring that each transaction received from the user during the secure session also includes a unique and never before used during the secure session sequence number supplied by the client of the user, the client incrementing the sequence number for each transaction of the secure session, and when any particular transaction of said secure session has said unique and never before used sequence number continuing the secure session and handling the transaction without requiring re-authentication of the user, and when the transaction does not have the unique and unused sequence number terminating the secure session.