Patent ID: 8719572

Claim:
A computing device providing secure data transactions, the computing device comprising: a memory including session authentication data having a key identifier, an initialization vector, an encrypted digital signature, and encrypted data with a session identifier, wherein the key identifier references a key having a validity period after which the key becomes invalid, the session authentication data neither including the key in an encrypted form nor including the key in an unencrypted form; a processor in communication with the memory, the processor configured to: receive a request from a user for information; retrieve the session authentication data from the memory in response to the request; and transmit the session authentication data to a web server via a communication network for authenticating the computing device in a session by validating the key and the validity period of the key and using the validated key to decrypt the encrypted data for verifying the session identifier, wherein the encrypted digital signature is used to verify an entity generating the session authentication data; wherein the session authentication data is a Hypertext Transfer Protocol (HTTP) cookie received from the web server, and wherein the cookie is further configured to authenticate the computing device on additional web servers serving different domains than the web server.