Patent ID: 7673141

Claim:
A system for providing secured access to an application service, the system comprising: a secure server including a challenge provider configured to: initially authenticate an identity of a client that seeks access to the application service, transmit an executable software component to the client based on information regarding the client, the executable software component to be executed by the client to communicate a response, and issue a challenge based on a first cryptographic technique to the client if the identity of the client is authenticated, the challenge comprising data that requires the response, wherein the challenge is issued in response to an action of the client; and an access server that interfaces with the client through the executable software component, and that includes an authentication service configured to: receive challenge information from the challenge provider, receive the response from the client, the response being based on the challenge and being encrypted at the client using a second cryptographic technique different from the first cryptographic technique, map the response from the client to determine a first key corresponding to the first cryptographic technique based on the challenge information, and to determine a second key corresponding to the second cryptographic technique, and allow the client to access the application service, if the response is authenticated using the first key to authenticate that the client was challenged by the challenge provider, and if the client is authenticated using the second key to authenticate the identity of the client.