Granted Patent B2

US 7,100,197 · App. 10/013,609 · Granted Aug 29, 2006

Abstract

Claims (125)

1. A network user authentication method, comprising:

receiving a network identification and a password associated with a user;

validating the network identification and the password;

generating a passkey for the user that allows the user to access one or more web servers without having to enter the network identification and the password each time, the passkey comprising the network identification, an IP address, a timestamp, a cyclic redundancy check, and a length, generating the passkey for the user comprising:

temporarily storing the network identification, the IP address, and the timestamp in a buffer as a string of data fields;

determining the cyclic redundancy check for the string;

appending the string with the determined cyclic redundancy check;

determining the length of the string; and

appending the string with the determined length; and

sending the passkey to the user for temporary storage in a computer of the user.

2. The method of claim 1 , further comprising prompting a user for the network identification and the password.

3. The method of claim 1 , further comprising encrypting the passkey before sending the passkey to the user.

4. The method of claim 1 , further comprising:

sending a redirect request to the computer; and

determining, based on the redirect request, that the passkey is stored in the computer.

5. The method of claim 1 , further comprising redirecting the computer of the user to a web server.

6. The method of claim 1 , wherein validating the network identification and the password comprises:

accessing a user database;

verifying that the password is not expired; and

verifying that the password is not suspended.

7. The method of claim 1 , wherein sending the passkey to the user for temporary storage in the computer of the user comprises sending the passkey to the user for temporary storage in a cookie file of the computer.

8. The method of claim 7 , further comprising:

sending a redirect request to the computer;

determining, based on the redirect request, that the cookie file of the computer is turned off;

prompting the user to turn the cookie file of the computer on; and

re-sending the passkey to the user for temporary storage in the cookie file of the computer of the user.

9. A network user authentication method, comprising:

receiving, at a web server, a request from a user;

determining whether a passkey is present in a cookie file of a computer of the user;

re-directing the user to an authentication server;

prompting the user for a network identification and a password;

receiving, at the authentication server, the network identification and the password;

validating the network identification and the password;

generating the passkey for the user, the passkey comprising the network identification, an IP address, a timestamp, a cyclic redundancy check, and a length, generating the passkey for the user comprising:

temporarily storing the network identification, the IP address, and the timestamp in a buffer as a string of data fields;

determining the cyclic redundancy check for the string;

appending the string with the determined cyclic redundancy check;

determining the length of the string; and

appending the string with the determined length;

encrypting the passkey;

sending the passkey to the user for temporary storage in the cookie file;

re-directing the user to the web server;

retrieving, at the web server, the passkey from the cookie file;

decrypting the passkey;

validating the passkey; and

generating a response to the request.

10. The method of claim 9 , further comprising determining, after sending the passkey to the user, that the passkey is stored in the cookie file.

11. The method of claim 9 , further comprising:

determining, after sending the passkey to the user, that the cookie file of the computer is turned off;

prompting the user to turn the cookie file of the computer on; and

re-sending the passkey to the user for temporary storage in the cookie file.

12. The method of claim 9 , wherein validating the network identification and the password comprises:

accessing a user database;

verifying that the password is not expired; and

verifying that the password is not suspended.

13. The method of claim 9 , wherein validating the passkey comprises verifying the length and verifying the cyclic redundancy check.

14. The method of claim 9 , wherein validating the passkey comprises:

verifying the length;

verifying the cyclic redundancy check;

verifying the network identification;

verifying the IP address; and

verifying the timestamp.

15. The method of claim 14 , wherein verifying the timestamp comprises:

determining an elapsed time since the creation of the passkey;

comparing the time period to an allowable time period; and

determining the elapsed time is less than the allowable time period.

16. A network user authentication system, comprising:

an authentication server operable to receive a network identification and a password associated with a user, validate the network identification and the password, generate a passkey for the user, and send the passkey to the user;

a computer storing the passkey in a cookie file of a memory of the computer for a predetermined time period;

a web server operable to retrieve the passkey from the cookie file, validate the passkey, and generate a response to the request; and

wherein the passkey comprises the network identification, an IP address, a timestamp, a cyclic redundancy check, and a length, the authentication server operable to generate the passkey by:

temporarily storing the network identification, the IP address, and the timestamp in a buffer as a string of data fields;

determining the cyclic redundancy check for the string;

appending the string with the determined cyclic redundancy check;

determining the length of the string; and

appending the string with the determined length.

17. The system of claim 16 , wherein the authentication server is further operable to prompt a user for the network identification and the password.

18. The system of claim 16 , wherein the authentication server is further operable to:

send a redirect request to the computer; and

determine, based on the redirect request, that the passkey is stored in the cookie file.

19. The system of claim 16 , wherein the authentication server is further operable to:

send a redirect request to the computer;

determine, based on the redirect request, that the cookie file of the computer is turned off;

prompt the user to turn the cookie file of the computer on; and

re-send the passkey to the user.

20. The system of claim 16 , wherein the authentication server is further operable to redirect the computer to the web server.

21. The system of claim 16 , wherein the authentication server is further operable:

access a user database;

verify that the password is not expired; and

verify that the password is not suspended.

22. The system of claim 16 , wherein the predetermined time period is a length of one session.

23. The system of claim 16 , wherein the web server is further operable to decrypt the passkey.

24. The system of claim 16 , wherein the web server is further operable to direct the user to the authentication server.

25. The system of claim 16 , wherein the web server is further operable to:

determine that the passkey is absent from the cookie file; and

redirect the user to the authentication server.

26. The system of claim 16 , wherein the web server is further operable to verify the length and verify the cyclic redundancy check.

27. The system of claim 16 , wherein the web server is further operable to:

verify the length;

verify the cyclic redundancy check;

verify the network identification;

verify the IP address; and

verify the timestamp.

28. The system of claim 27 , wherein the web server is further operable to:

determine a time period that has elapsed since the creation of the passkey;

compare the time period to an allowable time period; and

determining that the time period is less than the allowable time period.

29. The system of claim 27 , wherein the web server is further operable to:

determine a time period that has elapsed since the creation of the passkey;

compare the time period to an allowable time period;

determine that the time period is greater than the allowable time period.

30. A network user authentication system, comprising:

means for receiving a network identification and a password associated with a user;

means for validating the network identification and the password;

means for generating a passkey for the user, the passkey comprising the network identification, an IP address, a timestamp, a cyclic redundancy check, and a length, generating the passkey for the user comprising:

temporarily storing the network identification, the IP address, and the timestamp in a buffer as a string of data fields;

determining the cyclic redundancy check for the string;

appending the string with the determined cyclic redundancy check;

determining the length of the string; and

appending the string with the determined length;

means for sending the passkey to the user;

memory means for storing the passkey for a predetermined time period;

means for retrieving the passkey from the memory means;

means for validating the passkey; and

means for generating a response to the request.

Assignments (6)