Patent ID: 6985953

Claim:
A system for transferring secure data on a network comprising: a) a client capable of presenting conforming client data; b) a server capable of using said conforming client data to create at least two secure cookies, each of said at least two secure cookies including: i) a domain field capable of holding domain data to associate said secure cookie to a domain where said secure cookie is valid; ii) at least one name field capable of holding name data; iii) at least one value field capable of holding value data derived from said conforming client data; and iv) an expiration field capable of holding cookie expiration data; c) a network capable of transporting at least one of said at least two secure cookies between said server and said client; d) a client storage means capable of storing at least one of said at least two secure cookies; and e) a secure attribute service between said client and said server using said at least one of said at least two secure cookies, wherein: i) at least one of said at least two secure cookies is a key cookie containing an encrypted session key, said session key capable of encrypting said value data contained in another of said at least two secure cookies; and ii) said secure attribute service includes said server being configured to authenticate said client by comparing said conforming client data with said value data.