Patent ID: 7941830

Claim:
A method of authenticating communications in a network security service between a server computer that provides the service and a router device subscribing to the service, the method comprising: the router device generating a server authentication code; the server computer receiving a posting of an HTML form over an HTTP connection, the HTML form being posted by the router device to the server computer to send a service request for information about a URL; the server computer decrypting an encrypted device authenticator string included in the HTML form received from the router device to generate an unencrypted device authenticator, the unencrypted device authenticator including a device authentication code and the server authentication code generated by the router device; the server computer validating the device authentication code to verify that the router device is authorized to send the service request to the server, the server computer validating the device authentication by looking for a device identifier of the router device in the device authentication code; after determining that the device authentication code is valid, the server computer sending over an HTTP connection the server authentication code and information about the URL to the router device in an XML document, the server authentication code being included originally in the HTML form posted by the router device in the server computer; and after receiving the server authentication code and the information about the URL from the server computer in the XML document in the router device, the router device validating the server authentication code by comparing the server authentication code in the XML document received from the server computer against the server authentication code originally sent by the router device to the server computer to send the service request for the information about the URL.