Patent ID: 8484708

Claim:
A method performed by a server application for delegating authentication of a client application using a challenge/response protocol, the method comprising: determining that authentication of a client application is required and transmitting an authentication request to the client application; receiving a challenge/response request from the client application; authenticating the client application to the server application in accordance with the challenge response protocol; transmitting an access request to a second server application; receiving an authentication request from the second server application and transmitting the authentication request to the client application; receiving a second challenge/response request from the client application and transmitting the second challenge/response request to the second server application; and authenticating the server application to the second server application based on the second challenge/response request on behalf of the client application in accordance with the challenge/response protocol, wherein an authentication server is in communication with the server application and configured to authenticate the client application in accordance with the challenge/response protocol.