Agent-based one-shot authorisation scheme in a commercial extranet environment