Patent ID: 7392390

Claim:
A method for authenticating a client, comprising: receiving an authentication request from the client that includes a modified authenticator encrypted with a hashed salted password associated with a user, wherein the modified authenticator binds a timestamp to the client by exclusive or'ing the timestamp with a remote address and a local address associated with the client, wherein the remote address is a remote IP address, and wherein the local address is a local IP address; determining a remote address and a local address associated with the client; decrypting the modified authenticator with the hashed salted password; and employing the remote address, local address, and decrypted modified authenticator to authenticate the client by: concatenating the remote address with the local address associated with the client; determining a cryptographic digest associated with the concatenated addresses; exclusive or'ing the cryptographic digest with the decrypted modified authenticator to extract the timestamp associated with the modified authenticator; and if the extracted timestamp is within a pre-determined time window, authenticating the client.