Method and system for binding kerberos-style authenticators to single clients

A system for authenticating a client over a network, comprising:

• a client that is configured to communicate an authentication request;
• and
• an application authentication server that is configured to perform actions, including:
• receiving an authentication request from the client that includes a modified authenticator encrypted with a hashed salted password associated with a user, wherein the modified authenticator binds a timestamp to the client by combining the timestamp with a remote address and a local address associated with the client;
• determining the remote address and the local address associated with the client;
• decrypting the modified authenticator with the hashed salted password;
• and
• employing the remote address, local address, and the timestamp to authenticate the client.

An apparatus for authenticating a client, comprising:

• a means for receiving an authentication request from the client that includes a modified authenticator encrypted with a hashed salted password associated with a user, wherein the modified authenticator binds a timestamp to the client by a means for combining the timestamp with a remote address and a local address associated with the client;
• a means for determining a remote address and a local address associated with the client;
• a means for decrypting the modified authenticator with the hashed salted password;
• and
• a means for employing the remote address, local address, and decrypted modified authenticator to authenticate the client.