Security server token caching

Claim 3

A method as recited in claim 1 , wherein the user identification information includes a username and a one-time password (OTP), and wherein authorizing a second session includes determining whether the OTP is valid at the time that the second request is received.

Claim 4

A method as recited in claim 2 , wherein authorizing a second session further comprises determining whether the username and the OTP are in the cache, and if the username and the OTP are not in the cache, generating a request that can be sent to a password server to determine whether the OTP is currently valid.

Claim 5

A method as recited in claim 2 , wherein authorizing a second session further comprises determining whether the username and the OTP are in the cache, and if the username and the OTP are not in the cache, determining whether the username and the OTP are still valid.

Claim 6

A method as recited in claim 4 , wherein determining whether the username and the OTP are still valid comprises: creating and storing a cached time value for the username and the OTP that indicates how long the username and the OTP have been stored in the cache; and comparing the cached time value with an expiration time-out value to determine whether the username and OTP are still valid.

Claim 7

A method as recited in claim 4 , wherein the step of determining whether the username and the OTP are still valid comprises determining whether an active session currently exists between the client and the first server at the time of the second request.

Claim 8

A method as recited in claim 1 , wherein the user identification information includes a username and a one-time password (OTP), and wherein authorizing the second session further comprises the steps of: generating instructions to a second server for determining whether the username and OTP are currently in a second cache of the second server; and generating a request to a password server to authenticate the OTP; and generating instructions to the second server for caching the username and the OTP in memory at the second server.

Claim 9

A method as recited in claim 1 , wherein authorizing a second session comprises: receiving from the first server a second request that includes the user identification information that contains a username and a second one-time password (OTP); determining whether the username and the second OTP correspond to user identification information stored in the cache, and if so, authorizing the second session between the client and the first server.

Claim 10

A method as recited in claim 1 , wherein receiving a first request to establish a first session between the client and the first server comprises receiving a first request in a Challenge Handshake Authentication Protocol, and before establishing the first session between the client and the first server, validating the client using the Challenge Handshake Authentication Protocol.

Claim 11

A method as recited in claim 1 , wherein receiving a first request to establish a first session between the client and the first server comprises receiving the first request in a Password Authentication Protocol, and before establishing the first session between the client and the first server, validating the client using the Password Authentication Protocol.

Claim 12

A method as recited in claim 1 , wherein receiving a second request to establish a second session between the client and the first server comprises receiving the second request in a Challenge Handshake Authentication Protocol, and before establishing the second session between the client and the first server, validating the client using the Challenge Handshake Authentication Protocol.

Claim 13

A method as recited in claim 1 , wherein receiving a second request to establish a second session between the client and the first server comprises receiving the second request based a Password Authentication Protocol, and before establishing the second session between the client and the first server, validating the client using the Password Authentication Protocol.

Claim 14

A method as recited in claim 1 , wherein receiving a first request that includes user identification information for authenticating a requesting user includes receiving a one-time password that is generated by a Token card.

Claim 15

A method as recited in claim 13 , wherein receiving a second request that includes user identification information for authenticating a requesting user includes receiving the same one-time password as received in the first request.

Claim 16

A method as recited in claim 1 , wherein the step of establishing the first session comprises the step of establishing a first Point-to-Point (PPP) session between the client and the first server.

Claim 17

A method as recited in claim 1 , wherein the step of establishing the first session comprises the step of establishing a first Serial Line Internet Protocol (SLIP) session between the client and the first server.

Claim 18

A method as recited in claim 1 , wherein the step of establishing the second session comprises the step of establishing a second Point-to-Point (PPP) session between the client and the first server.

Claim 19

A method as recited in claim 1 , wherein the step of establishing the second-session comprises the step of establishing a second Serial Line Internet Protocol (SLIP) session between the client and the first server.

Claim 20

A method as recited in claim 1 , wherein the first request includes a first username and a first one-time password (OTP) and the second request includes a second username and a second one-time password (OTP); wherein storing the user identification information includes the step of storing the first username and the first OTP in a cache; and wherein authorizing the second session comprises determining that the second OTP corresponds to the first OTP that is in the cache.

Claim 23

A computer-readable medium carrying one or more sequences of instructions for establishing a plurality of sessions between a client and a first server over a communication network based on one set of user identification information, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 24

A computer-readable medium carrying one or more sequences of instructions for establishing a plurality of sessions between a client and a first server over a communication network based on one set of user identification information, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 25

A computer data signal embodied in a carrier wave, the computer data signal carrying one or more sequences of instructions for establishing a plurality of sessions between a client and a first server over a communication network based on one set of user identification information, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 26

A computer data signal embodied in a carrier wave, the computer data signal carrying one or more sequences of instructions for establishing a plurality of sessions between a client and a first server over a communication network based on one set of user identification information, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 27

A computer apparatus comprising: a processor; and a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing sessions between a client and a first server, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 28

A computer apparatus comprising: a processor; and a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing sessions between a client and a first server, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the request includes user identification information; determining, based on the user identification information, whether the first session between the client and the first server should be established, and if so, authorizing the first session to be established between the client and the first server and storing the user identification information in a cache; and authorizing a second session between the client and the first server, in response to receiving a second request, based on the user identification information from the first request that is stored in the cache.

Claim 33

A computer-readable medium carrying one or more sequences of instructions for establishing multiple sessions between a client and a first server over a communications network, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the first request includes a first one-time password (OTP); performing a first user authentication by determining whether to authorize the first session based on the first OTP; if the first session is determined to be authorized, then carrying out the steps of sending a message authorizing the first session between the client and the first server and sending a message that causes a second server to cache the first OTP at the second server; receiving a second request to establish a second session between the client and the first server, wherein the second request includes a second OTP; performing a second user authentication by determining whether the second OTP matches the first OTP that is in the cache; and authorizing the second session between the client and the first server based on whether the second OTP matches the first OTP.

Claim 34

A computer-readable medium carrying one or more sequences of instructions for establishing multiple sessions between a client and a first server over a communications network, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the first request includes a first one-time password (OTP); performing a first user authentication by determining whether to authorize the first session based on the first OTP; if the first session is determined to be authorized, then carrying out the steps of sending a message authorizing the first session between the client and the first server and sending a message that causes a second server to cache the first OTP at the second server; receiving a second request to establish a second session between the client and the first server, wherein the second request includes a second OTP; performing a second user authentication by determining whether the second OTP matches the first OTP that is in the cache; and authorizing the second session between the client and the first server based on whether the second OTP matches the first OTP.

Claim 35

A computer apparatus comprising: a processor; and a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing multiple sessions between a client and a first server over a communications network, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the first request includes a first one-time password (OTP); performing a first user authentication by determining whether to authorize the first session based on the first OTP; if the first session is determined to be authorized, then carrying out the steps of sending a message authorizing the first session between the client and the first server and sending a message that causes a second server to cache the first OTP at the second server; receiving a second request to establish a second session between the client and the first server, wherein the second request includes a second OTP; performing a second user authentication by determining whether the second OTP matches the first OTP that is in the cache; and authorizing the second session between the client and the first server based on whether the second OTP matches the first OTP.

Claim 36

A computer apparatus comprising: a processor; and a memory coupled to the processor, the memory containing one or more sequences of instructions for establishing multiple sessions between a client and a first server over a communications network, wherein execution of the one or more sequences of instructions by the processor causes the processor to perform the steps of: receiving a first request to establish a first session between the client and the first server, wherein the first request includes a first one-time password (OTP); performing a first user authentication by determining whether to authorize the first session based on the first OTP; if the first session is determined to be authorized, then carrying out the steps of sending a message authorizing the first session between the client and the first server and sending a message that causes a second server to cache the first OTP at the second server; receiving a second request to establish a second session between the client and the first server, wherein the second request includes a second OTP; performing a second user authentication by determining whether the second OTP matches the first OTP that is in the cache; and authorizing the second session between the client and the first server based on whether the second OTP matches the first OTP.