Patent ID: 7823192

Claim:
A system to provide application-to-application enterprise security for different applications on different platforms where there is no continuing context or session and a new context is created with new invocations from one of the applications to another, the system comprising: a first computer comprising a security application program interface and an application program interface coupled to a client application on a first platform, the security application program interface operable to provide a security credential; an authentication authority receiving the security credential from the security application program interface, the authentication authority further generates a token and communicates the token to the security application program interface where the security credential is valid, wherein the token contains user credentials encoded as a platform and application independent string data type; a store maintaining data validating the security credential, the store in communication with the authentication authority to validate the security credential, the application program interface coupled to the client application communicating regarding the validity of the token; and a second computer comprising a distinct server application on a second platform to receive the token from the application program interface coupled to the client application, a security application program interface coupled to the distinct server application communicating with the authentication authority to validate the token to enable the client application to use services of the server application, wherein there is no continuing context or session and a new context is created with every invocation of service of the distinct server application by the client application.