Patent ID: 8650622

Claim:
A method in a portable communication device for authorizing a client to access a resource in a network, wherein the portable communication device is associated with an authorization server for the network via an authentication function that has shared an authentication key with the portable communication device, the method comprising: receiving a redirection Uniform Resource Location (URL); responsive to receiving said redirection URL, presenting to a user of the portable communication device a request requesting authorization of the client to access the resource; receiving authorization from the user to authorize the client to access the resource; responsive to receipt of said authorization from the user, generating, by the portable communication device and based on said shared authentication key, an at least provisional access token to be used by said client for accessing said resource in the network, and providing said at least provisional access token for the client, to enable said at least provisional access token to be authenticated by the authorization server for authenticating access by the client to said resource.