Patent ID: 7032110

Claim:
A method for providing a single sign-on authentication and privacy, comprising in order: submitting a request to access a node, wherein the request is submitted by a client; searching for a security token, wherein the searching is performed by a security filter on a server and operates to search for the security token sent from the client to the server, wherein the security token, if present, is stored on the client as a cookie; directing the client to submit a certificate to the server, wherein the directing is performed by the security filter on the server; verifying the submitted certificate with a trusted certificate, wherein the verifying is performed by a security extension on the server and operates to verify the submitted certificate sent from the client to the server; performing a challenge, wherein the challenge is generated by the security extension on the server and is sent to the client; generating a response to the challenge, wherein the response is generated by the client and is sent to the server; and saving the response as a named cookie on the client, wherein the response is saved by the client.