Method and system for authenticating a request
View Patent ↗A method and system for communicating between a user network device and a server includes a first server and a user network device that requests an electronic token (eToken) from the first server. The first server communicates the eToken, a signature key, and a server time. The user network device determines a signature using the server time and signature key and communicates a request for data to a second server. The request for data includes a signature. The second server communicates data to a user network device.
1. A method comprising:
communicating a request for an encrypted token to a first server from a user network device;
communicating the encrypted token, a signature key, and a server time from the first server to the user network device;
determining a signature using the server time and signature key at the user network device;
communicating a request for data from the user network device to a second server, said request for data including the signature and the encrypted token; and
communicating the data from the second server to the user network device.
2. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating a site identifier to the first server.
3. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating a user identifier to the first server.
4. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating a site identifier and a user identifier to the first server.
5. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating a site identifier, a user identifier and a password to the first server.
6. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating the request for the encrypted token from a mobile device.
7. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating the request for the encrypted token through a wireless network.
8. A method as recited in claim 1 wherein communicating the request for the encrypted token comprises communicating the request for the encrypted token from the user network device.
9. A method as recited in claim 1 further comprising requesting the encrypted token from an authentication server.
10. A method as recited in claim 1 wherein determining the signature comprises determining the signature from an elapsed time and the server time.
11. A method as recited in claim 10 further comprising determining the elapsed time between requesting the encrypted token from the first server and generating the request for data from the second server.
12. A method as recited in claim 1 further comprising validating the request for data based on the signature and the encrypted token.
13. A method as recited in claim 1 further comprising validating the request for data based on the signature and the encrypted token at the first server.
14. A method as recited in claim 1 wherein communicating the request for data comprises communicating a request for program guide data.
15. A method as recited in claim 1 wherein the user network device comprises a mobile device.
16. A method as recited in claim 1 wherein the user network device comprises a set top box.
17. A system comprising:
a first server;
a user network device that requests an encrypted token from the first server;
said first server communicating the encrypted token, a signature key, and a server time to the user network device;
said user network device determining a signature using the server time and the signature key and communicating a request for data to a second server, said request for data including the signature and the encrypted token; and
said second server communicating data to the user network device.
18. A system as recited in claim 17 wherein the user network device requests the encrypted token and communicates a site identifier to the first server.
19. A system as recited in claim 17 wherein the user network device requests the encrypted token and communicates a user identifier to the first server.
20. A system as recited in claim 17 wherein the user network device requests the encrypted token and communicates a site identifier and a user identifier to the first server.
21. A system as recited in claim 17 wherein the user network device requests the encrypted token and communicates a site identifier, a user identifier and a password to the first server.
22. A system as recited in claim 17 wherein the user network device comprises a mobile device.
23. A system as recited in claim 17 wherein the user network device requests the encrypted token through a wireless network.
24. A system as recited in claim 17 further comprising an authentication server providing the encrypted token.
25. A system as recited in claim 17 wherein the signature is based on an elapsed time and the server time.
26. A system as recited in claim 25 wherein the elapsed time is a time period between a first request for the encrypted token and the request for data.
27. A system as recited in claim 17 wherein the second server receives the request for data, the signature and the encrypted token from the user network device and communicates the request for data, the signature and the encrypted token to the first server, said first server validating the request for data based on the signature and the encrypted token.
28. A system as recited in claim 17 wherein the request for data comprises a request for program guide data.
29. A system as recited in claim 17 wherein the first server comprises an authentication server and the second server comprises a program guide data server.
30. A system as recited in claim 17 wherein the user network device comprises a mobile wireless device.