Binding digitally signed requests to sessions
US9780952B1 · kind B1 · utility
12Cited by
4References
21Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Dec 12, 2014 |
| Grant date | Oct 3, 2017 |
| Priority date | — |
| Expiry date | Jan 8, 2035 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/166
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A client establishes an cryptographically protected communications session and determines information usable to distinguish the session from other sessions. The client digitally signs the information using a cryptographic key that is independent of the session to enable a server to check whether the information matches the session that it established and whether the digital signature is correct. The server may perform mitigating operations if either or both of the information or the digital signature is/are invalid.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.