Patent ID: 7681037

Claim:
A network connection system comprising: a client machine; an authentication server machine; and a connection server machine; wherein: the authentication server machine includes: a retention unit configured to store second connection authentication information generated by the connection server machine based on user identification information and to store an association between the second connection authentication information and a connection server address of the connection server machine; a first unit configured to acquire, from the client machine, second connection authentication information that is generated by the client machine based on user identification information input into the client machine and to acquire a client address of the client machine once the first unit receives a connection request from the client machine; and a second unit configured to transmit the client address to the connection server address associated with the second connection authentication information acquired by the first unit and to transmit the connection server address to the client machine, the authentication server machine transmitting the connection server address to the client machine in an authentication process before having ever received the connection server address from the client machine in the same authentication process; the client machine includes: a third unit configured to transmit in a message the second connection authentication information generated by the client machine to the authentication server machine together with the connection request, the message lacking the address of the connection server machine; a fourth unit configured to receive the connection server address from the authentication server machine; and a fifth unit configured to prepare first connection authentication information based on the user identification information input into the client machine and to transmit the first connection authentication information to the connection server address of the connection server machine; the connection server machine includes: a sixth unit configured to allow the first connection authentication information to be received from the client machine, the client address being received from the authentication server machine; and a seventh unit configured to perform itself an authentication process by using the first connection authentication information transmitted from the client address, and the authentication server machine, in response to receiving the second connection authentication information from the client machine, searches the retention unit for the second connection authentication information to determine the connection server address associated with the second connection authentication information.