Patent ID: 8583915

Claim:
An authentication system comprising: a first server configured to authenticate a plurality of client devices, said first server including a first processor readable storage medium on which is stored: a plurality of public keys, wherein ones of the public keys are matched with ones of a corresponding plurality of private keys stored on the plurality of client devices; and a first server private key, said private key matched to a public key stored on the plurality of client devices; and a second server configured to electronically communicate with the first server and the plurality of client devices, the second server including a second processor readable storage medium on which client device information corresponding to the plurality of client devices is stored, wherein the second server is configured to: establish respective communication sessions between the plurality of client devices and the authentication system, the respective communication sessions authenticated by the first server; provide content to the plurality of client devices in the respective communication sessions, the content including private information obtained by the second server from third party services using the client device information corresponding to the plurality of client devices; and store the client device information corresponding to the plurality of client devices in the second processor readable storage medium; wherein the second server is configured to obtain authorization from the first server to provide content to a respective client device of the plurality of client devices in response to successful authentication of the respective communication session by the first server, and wherein the client device information for the respective client device includes: a putative ID (PID) associated with the respective client device, the PID being distinct from a device identifier and used to indicate the successful authentication of the respective client device with the authentication system; an owner key (OK) provided from the client, the OK being indexed to the PID; and a security token provided from the client, the security token being indexed to the PID, wherein the security token is encrypted using the OK for storage at the second server; wherein the security token is used by the second server to obtain the private information for the respective client device from a third party service; and wherein the first server private key and a key from the plurality of public keys are used by the first server to encrypt data and authenticate the respective communication session between the respective client device and the second server.