Patent ID: 7657531

Claim:
A method of enabling access to a resource of a distributed application server or processing system by a user/client application possessing a valid security-context, comprising the steps of: receiving the security-context and an appended protected security-context renewal request provided by the user to an access authorization component of the application server or processing system; verifying the validity of the security-context and the security-context renewal request; extracting content of both the security-context and the security-context renewal request; comparing current time to an expiration time identifying time of expiration of the security-context; if the expiration time is less than the current time, comparing the security-context renewal request with stored identity and authorization information comprising at least one of a user identifier, an organization identifier, a sub-organization identifier, a key, an authentication certificate, an user location, a user role, and an user position identifying the user to the access authorization component and generating a new symmetric key, and other access and authorization information; generating an updated security-context based on the verifying of the user's identity and authorization and based on the user having requested authority for access to the resource and services; providing the updated security context to the user; and sending the updated security-context and a request for access to the resource and services by the user to the application server or processing system.