Patent ID: 8656462

Claim:
A computer implemented method, comprising: receiving, at a processing node comprising a communication device, a request for a domain from a client browser; determining if the client browser is both authenticated and authorized through the steps of: determining a state of a plurality of states associated with the client browser based on data included with the request, wherein the plurality of states are managed by a state manager and the plurality of states comprise a plurality of authenticated states and an unauthenticated state; determining whether the state comprises an authenticated state of the plurality of authenticated states, in response to the state comprises an authenticated state of the plurality of authenticated states, determining at the processing node whether the request includes domain authorization data for the requested domain; in response to the request for the domain includes the domain authorization data, determining whether the domain authorization data matches with the requested domain, in response to the domain authorization data matches with the requested domain, allowing the request for the domain; in response to the request for the domain does not include the domain authorization data, requesting authorized user data from the client browser; in response to the request for the authorized user data, determining whether the client browser provided the authorized user data; in response to the client browser provided the authorized user data, generating at the processing node the domain authorization data, allowing the request for the domain, and providing the domain authorization data to the client browser; in response to if the client browser does not provide the authorized user data, requesting user authorization from the client browser.