Patent ID: 8775810

Claim:
A computer-implemented method for providing access to a service, comprising: generating, via at least one of a first set of computing devices, an asymmetric signature key pair comprising a signature creation key and a signature validation key; generating, via at least one of the first set of computing devices, an asymmetric token key pair comprising a token encryption key and a token decryption key; encrypting, via at least one of a second set of computing devices, the signature validation key with the token encryption key to generate an encrypted token, the encrypted token comprising at least the encrypted signature validation key; transmitting, via at least one of the second set of computing devices, the encrypted token and the signature creation key to a client device; receiving, from the client device via at least one of the second set of computing devices, the encrypted token, a request for the service, and a digital signature for the encrypted token generated using the signature creation key; attempting to decrypt, via at least one of the second set of computing devices, the encrypted token with the token decryption key; extracting, via at least one of the second set of computing devices, the signature validation key from the encrypted token in response to successfully decrypting the encrypted token; validating, via at least one of the second set of computing devices, the digital signature using the signature validation key; notifying, via at least one of the second set of computing devices, a service provided via at least one of a third set of computing devices that the client is authorized to access the service in response to successfully validating the digital signature; and notifying, via at least one of the second set of computing devices, the service that the client is not authorized to access the service in response to unsuccessfully decrypting the encrypted token or unsuccessfully validating the digital signature.