Browser security module

A computer-implemented method, comprising:

• receiving a set of security credentials via a link received a browser on a client device from an authentication server;
• receiving first active script at the browser,
• executing the first active script, wherein the first active script causes the set of security credentials, including at least a secure key encoded by a client token, to be stored in a security module associated with the browser, the security module having an interface enabling active content executing in the browser to cause the security module to perform one or more operations using the secure key;
• receiving second active content, wherein the second active content, when executed in the browser, contacts the security module to produce a result using the secure key, the result including the client token;
• performing, by the security module, an operation of the one or more operations using the secure key, the operation based at least in part on a characteristic of the second active content;
• enabling the active content executing in the browser to receive-the result of the operation from the security module, without exposing the secure key to the second active content;
• and
• sending, via the second active content, a request using the result to a server to obtain content upon authentication by the server that the result was produced using the secure key.

A computing device, comprising:

• a device processor;
• a security module associated with a browser application on the computing device;
• and
• memory including instructions that, when executed by the device processor, cause the computing device to:
• receive a secure key via a link at a browser on a client device;
• receive first active content at the browser;
• execute the first active content, wherein the first active content causes the secure key to be stored in a security module associated with the browser, the security module having an interface enabling active content executing in the browser to cause the security module to perform one or more operations using the secure key;
• receive, at the browser, second active content, the second active content, when executed, contacting the security module to produce a result using the secure key;
• perform, by the security module, an operation of the one or more operations using the secure key, the operation based at least in part on a characteristic of the second active content;
• enable the second active content to receive the result of the operation without exposing the key to the active content;
• and
• sending, via the second active content, a request using the result to a server to obtain content upon authentication by the server that the result was produced using the secure key.