Patent ID: 7519812

Claim:
A method of authenticating and authorizing a service request sent from a service client through a firewall to a service provider, comprising the steps of: using a service request filter, intercepting an incoming service request from a service client on a communication channel, the service request having a digital certificate of the service client attached; using the service request filter, authenticating the digital certificate with an issuing certification authority; using the service request filter, extracting a service client identifier from the digital certificate associated with the service request; using the service request filter, storing the service client identifier in a memory; using the service request filter, forwarding the service request to a web service manager; at the web service manager, responsive to receiving the service request, retrieving the service client identifier from the memory and sending an authentication request to a service client authentication program; responsive to receiving an authentication request from a web service manager at the service client authentication program, matching the service client identifier with a service client record; responsive to matching the service client identifier with the service client record, sending a request to a service authorization program for an authorization for the service request; at the service authorization program, determining if the service client identifier associated with the service request is entitled to access the service provider; and responsive to determining that the service client is entitled, returning a service authorization to the web service manager; at the web service manager, routing the service request to the service provider to process the request; responsive to the service provider processing the request, returning an output to the web service manager.