Patent ID: 7761911

Claim:
A method for preventing unauthorized access to a cookie during a single sign-on of a client, the method comprising: receiving a domain cookie from the client forwarded by an application server at a single sign-on server, wherein the domain cookie includes a domain identifier and encrypted secret path information which is encrypted using a key known only to the single sign-on server, and wherein the secret path information indicates a network path that terminates at the single sign-on server; decrypting the encrypted secret path information using the key to reveal the network path; sending a request to the client requesting a domain-token cookie, wherein the request indicates the decrypted network path; and receiving the domain-token cookie from the client forwarded by the application server at the single sign-on server, wherein the domain-token cookie comprises the domain identifier, clear secret path information which indicates the network path, and user credential encrypted using the key known only to the single sign-on server, and wherein the network path derived from the clear secret path information in the domain-token cookie matches the decrypted network path in the request.