Patent ID: 7089585

Claim:
A computer-implemented method for authorizing a second client-based application on a client computer to access a service provided by a second server-based application based upon a previously provided authorization that authorized the client computer to use a first client-based application to access a service provided by the first server-based application comprising: (a) receiving a request for authorizing the client computer to use said second client-based application to access the service provided by said second server-based application; (b) wherein the service provided by said second server-based application is different than the service provided by said first server-based application; (c) wherein the request for authorizing the client computer to use said second client-based application to access the service provided by said second server-based application originates from said first client-based application; (d) in response to said request: (i) determining a session length indicating a length of time said client computer has been authorized to access the service provided by said first server-based application; (ii) calculating a hash value for an authorization ticket received from said first server-based application, said session length, and a secret shared between said client computer and said second server-based application, and (iii) transmitting a request for authorization to access the service provided by said second server-based application comprising said hash value, said authorization ticket, and said session length.