Patent ID: 7127607

Claim:
An authentication system, comprising: a security filter to monitor sessions between a client and a server for proper authentication, to search for a security token sent from the client to the server, wherein the security token, if present, is stored on the client as a cookie, and to direct the client to submit a certificate to the server; a plug-in coupled to the client and the server, said plug-in to generate public and private key pairs, and to receive and store certificates; and security extension coupled to said filter, said extension to verify the submitted certificate sent from the client to the server, to generate script commands to cause the client and the server to perform required operations indicated by said security filter, wherein the extension is configured to generate a node challenge random number; and to cause the client to generate a response to the node challenge random number, to send the response to the server, and to save the response as a named cookie on the client.