Patent ID: 7234157

Claim:
A method for providing access to at least one secure resource upon authentication of a user where said user authentication is performed by an authentication server in remote communication with a client in use by said user, the method comprising the steps of: (a) submitting a user authentication request to said authentication server; (b) in response to a successful user authentication: (b1) receiving an authenticated user credential which is unique to said user; (b2) storing said authenticated credential on said client utilizing a security method to prevent tampering with the credential; and (b3) using said authenticated credential to access said at least one secure resource; (c) in response to an unsuccessful user authentication: (c1) determining whether said authentication server is in operative communication with said client; (c2) in response to a step (c1) determination that said authentication server is not in operative communication with said client: (c2a) searching said client for a stored authenticated credential corresponding to said user; (c2b) in response to a step (c2a) finding of an authenticated credential corresponding to said user, using said stored authenticated credential to access said at least one secure resource without further authenticating the credential with the server or other authenticating entity while said authentication server is not in operative communication with said client; and (c2c) in response to not finding in step (c2a) an authenticated credential corresponding to said user, failing the user authentication request; and (c3) in response to a step (c1) determination that said authentication server is in operative communication with said client: (c3a) erasing from said client any stored authenticated credential corresponding to said user; and (c3b) failing said user authentication request.