Patent ID: 7603700

Claim:
A method of facilitating authentication of a client by an authentication system that comprises at least one processor connected to a storage device, the method comprising: generating, at the authentication system, a first authentication credential that includes an identifier, and a second authentication credential; providing, from the authentication system and to a client device in a first communication session, the first authentication credential; providing, from the authentication system and to an application system in another communication session that is different from the first communication session, the second authentication credential; receiving, at the authentication system and from the client device, the first authentication credential and the second authentication credential that was received by the client device from the application system, in a third communication session that is different from the first and the other communication sessions; determining, at the authentication system and using at least one processor of the authentication system, whether the second authentication credential includes an indicator of the identifier of the first authentication credential; and enabling, at the authentication system, the second authentication credential to be used as a mechanism in authenticating the client only when the second authentication credential includes an indicator of the identifier of the first authentication credential.