US 10,567,363 B1Granted

Deterministic reproduction of system state using seeded pseudo-random number generators

AssigneeShape Security, Inc.

InventorMichael J. Ficarra

Life of this patent

Estimating the term…

Loading patent…

Abstract

Computer systems and methods for improving the security and efficiency of client computers interacting with server computers through an intermediary computer using one or more polymorphic protocols are discussed herein. In an embodiment, a computer system comprises a memory; one or more processors coupled to the memory and configured to: generate a modified identifier for a original object based on a original identifier and a nonce; render one or more instructions that include the nonce and define a modified object that corresponds to the original object and includes the modified identifier; send the one or more instructions to a client computer, wherein the one or more instructions, when executed by the client computer, are configured to cause the client computer to send a request from the client computer with the modified identifier and the nonce; receive, from the client computer, a request with a challenge identifier and a challenge nonce; generate a test identifier based on the original identifier and the challenge nonce; determine whether the test identifier matches the challenge identifier.

Claims20

Dependent claims

A computer system configured to improve security of client computers interacting with server computers comprising:

a memory;
one or more processors coupled to the memory and configured to:
generate a first modified identifier for a first original object defined in one or more first instructions based on a first original identifier for the first original object and a first nonce;
render one or more second instructions that include the first nonce and define a first modified object that corresponds to the first original object and includes the first modified identifier, wherein the one or more second instructions, when executed by a client computer, are configured to cause the client computer to send a request from the client computer with the first modified identifier and the first nonce;
send the one or more second instructions to the client computer;
receive, from the client computer, a first request with a first challenge identifier and a first challenge nonce;
generate a first test identifier based on the first original identifier and the first challenge nonce for validating the first request from the client computer;
determine whether the first test identifier matches the first challenge identifier;
validate the first request from the client computer based on determining whether the first test identifier matches the first challenge identifier.

6 more elements

A method, comprising:

generating a first modified identifier for a first original object defined in one or more first instructions based on a first original identifier for the first original object and a first nonce;
rendering one or more second instructions that include the first nonce and define a first modified object that corresponds to the first original object and includes the first modified identifier, wherein the one or more second instructions, when executed by a client computer, are configured to cause the client computer to send a request from the client computer with the first modified identifier and the first nonce;
sending the one or more second instructions to the client computer;
receiving, from the client computer, a first request with a first challenge identifier and a first challenge nonce;
generating a first test identifier based on the first original identifier and the first challenge nonce for validating the first request from the client computer;
determining whether the first test identifier matches the first challenge identifier;
validating the first request from the client computer based on determining whether the first test identifier matches the first challenge identifier;
wherein the method is performed using one or more processors.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/060,380Filed 3 Mar 2016
Granted: 18 Feb 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification5 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
H04L 63/1441
For detecting or protecting against malicious traffic: countermeasures against malicious traffic
H04L 63/1466
Countermeasures against malicious traffic: active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g.…
H04L 2463/144
Additional details relating to network architectures or network communication protocols for network security covered by H04L63/00: detection or…