Patent ID: 7707630

Claim:
A computer system, comprising: an authentication server; a client in remote communication with the authentication server; a secure gateway machine connected between the authentication server and the client; and at least one secure resource in communication with the client; wherein the client is configured to store on the client a first authenticated credential received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the credential; wherein the client is configured to use the stored first authenticated credential to access the at least one secure resource without further authenticating the first credential with the server or other authenticating entity while the authentication server is not in operative communication with the client; wherein the gateway machine is configured to store a second authenticated credential on the gateway received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the second credential; and wherein the client is further configured to use the second authenticated credential to access the at least one secure resource without further authenticating the second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.