Patent ID: 7849324

Claim:
A method comprising: communicating, by a first entity via a client computing device, a first entity identity to an authentication server for verification; receiving a relationship ticket from the authentication server after the first entity identity has been successfully verified, wherein the relationship ticket received from the authentication server is encrypted so that the relationship ticket cannot be decrypted by the client computing device which receives the relationship ticket, wherein the relationship ticket includes the first entity identity and identifies a second entity that is to have limited access to a web server; generating, by the first entity via the client computing device, a request to modify a permission level for the second entity which will modify the access of the second entity to the web server; sending, by the first entity via the client computing device, the request and the relationship ticket to the web server, wherein the web server: decrypts the relationship ticket; authenticates the first entity identity, wherein the web server authenticates the first entity identity with the authentication server using contents of the relationship ticket; and modifies the permission level for the second entity; and receiving, by the first entity via the client computing device, a success code from the web server when the permission level is modified for the second entity, wherein the method does not require the use of secure communications protocols including SSL (Security Socket Layer), wherein the client computing device, the web server and the authentication server communicate using an unsecure or untrusted communication link.