Integrated tracking of multi-authentication among web services

• US 20020059531A1
• Filed: 04/03/2001
• Published: 05/16/2002
• Est. Priority Date: 11/16/2000
• Status: Abandoned Application

• Current Assignee: Warren Kwan Lai On
• Original Assignee: Warren Kwan Lai On
• Inventors: Lai On, Warren Kwan
• Application Number:
  US09/825,405
• Publication Number:
  US 20020059531A1
• Time in Patent Office: Days
• US Class Current: 713/202
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations

Abstract

This invention presents a computerized method and system for sharing network authentication. The method includes receiving login information at an authentication site for a user logging into a first site. The login information includes an identification of the user. The login information is verified at the authentication site. A user session key and a second site'"'"'s site key is transmitted to the verified user through the first site. The user session key and the second site'"'"'s site key are generated at the authentication site. The user session key is received at the authentication site for the user logging into a second site. The user session key from the user is verified at the authentication site. The second site'"'"'s site key is transmitted to the verified user through the second site.

Claims

1. A computerized method for sharing network authentication comprising:

receiving login information at an authentication site for a user logging into a first site, wherein the login information comprises an identification of the user;

verifying the login information at the authentication site;

transmitting a user session key and a second site'"'"'s site key to the verified user through the first site, wherein the user session key and the second site'"'"'s site key are generated at the authentication site;

receiving the user session key at the authentication site for the user logging into a second site;

verifying the user session key from the user at the authentication site; and

transmitting the second site'"'"'s site key to the verified user through the second site.

2. The method of claim 1, additionally comprising storing the login information, generated user session key, and generated second site'"'"'s site key at the authentication site.

3. The method of claim 1, wherein the authentication site comprises the first site.

4. The method of claim 1, wherein the identification of the user comprises a user identification and a user password.

5. The method of claim 1 wherein the information of the user comprises a user biometric.

6. The method of claim 1 wherein the verification of the login information comprises comparing the login information to a stored login information at the authentication site.

7. A computer system for sharing network authentication comprising:

a first computer, wherein the first computer comprises a memory and a processor;

executable software residing in the first computer memory, wherein the software is operative with the first computer processor to;

receive login information from a user logging into the first computer, wherein the login information comprises an identification of the user;

transmit the login information to an authentication computer, wherein the authentication computer comprises a memory and a processor;

receive a user session key and a second site'"'"'s site key from the authentication site; and

transmit the user session key and the second site'"'"'s site key to the user;

a second computer, wherein the second computer comprises a memory and a processor;

executable software residing in the second computer memory, wherein the software is operative with the second computer processor to;

receive the user session key from the user logging into the second computer;

transmit the user session key to the authentication computer;

receive the second site'"'"'s site a key from the authentication site; and

transmit the second site'"'"'s site key to the user; and

executable software residing in the authentication computer memory, wherein the software is operative with the authentication computer processor to;

receive the login information from the user logging into the first computer;

verify the login information;

transmit the user session key and the second site'"'"'s site key to the first computer, wherein the user session key and the second site'"'"'s site key are generated at the authentication site;

receive the user session key from the user logging into the second computer;

verify the user session key; and

transmit the second site'"'"'s site key to the second computer.

8. The system of claim 7, wherein the first computer, second computer, and authentication computer are connected via a computer communications network.

9. The system of claim 8, wherein the computer communications network comprises an Internet.

10. The system of claim 8, wherein the computer communications network comprises a network comprising a TCP/IP protocol.

11. A computer system for sharing network authentication comprising:

an authentication computer, wherein the computer comprises a memory and a processor; and

executable software residing in the computer memory wherein the software is operative with the processor to;

receive login information at an authentication site for a user logging into a first site, wherein the login information comprises an identification of the user;

verify the login information at the authentication site;

transmit a user session key and a second site'"'"'s site key to the verified user through the first site, wherein the user session key and the second site'"'"'s site key are generated at the authentication site;

receive the user session key at the authentication site for the user logging into a second site;

verify the user session key from the user at the authentication site; and

transmit the second site'"'"'s site key to the verified user through the second site.

12. A computer data signal embodied in a digital data stream for sharing network authentication, wherein the computer data signal is generated by a method comprising the steps of:

receiving login information at an authentication site for a user logging into a first site, wherein the login information comprises an identification of the user;

verifying the login information at the authentication site;

transmitting a user session key and a second site'"'"'s site key to the verified user through the first site, wherein the user session key and the second site'"'"'s site key are generated at the authentication site;

receiving the user session key at the authentication site for the user logging into a second site;

verifying the user session key from the user at the authentication site; and

transmitting the second site'"'"'s site key to the verified user through the second site.