Patent ID: 8850520

Claim:
A method of validating requests from a client, comprising: at a server associated with a first URL, receiving a first request from the client, including a first object that includes a respective user identifier and a validation value; evaluating the validation value of the received first object with respect to a first validation requirement; when the validation value of the first object fails the first validation requirement, sending a response to the client that causes the client to send a second request to a second URL that is distinct from the first URL; at a server associated with the second URL, receiving the second request from the client that includes a second object, distinct from the first object; evaluating the received second object with respect to a second validation requirement; when the second object fails the second validation requirement, invalidating the respective user identifier; and after invalidating the respective user identifier: receiving an additional request at the server associated with the first URL, the additional request including the first object, and responding to the additional request by sending to the client a new object that includes a new user identifier and a new validation value, and providing a response to the request using the new user identifier; wherein using the new user identifier prevents access to user data associated with the first user identifier.