Security measures for extended sessions using multi-domain data
AssigneeShape Security, Inc.
InventorsMengmeng Chen, Sumit Agarwal, Yao Zhao
Life of this patent
Estimating the term…
Abstract
A security server device, method, non-transitory computer readable medium and security system that receives request data for a request from a client to a web server system where the request comprises a session identifier (ID) for a session between an authenticated user and the web server system. A determination is made whether the client is a single-user device based on the request data and multi-domain data. Another determinations is made on whether the client is compromised based on the request data. In response to the determinations that the client is a single-user device and is not compromised an extension of the session between the authenticated user on the client and the web server system is caused.
Claims20
A security server device comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- receive request data for a request from a client to a web server system, the request comprising a session identifier (ID) for a session between an authenticated user and the web server system;
- obtain user identifier (UID) data for the client;
- determine when the client is a single-user device based on the UID data, wherein the UID data corresponds to one or more users that have previously used the client to successfully authenticate with two or more web server systems;
- determine when the client is compromised based on security data for the client;
- and
- in response to the determinations that the client is a single-user device and is not compromised, cause extension of the session between the authenticated user on the client and the web server system.
A method implemented by a security system comprising one or more security server devices, web server systems, or client computing devices, the method comprising:
- receiving request data for a request from a client to a web server system, the request comprising a session identifier (ID) for a session between an authenticated user and the web server system;
- obtaining user identifier (UID) data for the client;
- determining when the client is a single-user device based on the UID data, wherein the UID data corresponds to one or more users that have previously used the client to successfully authenticate with two or more web server systems;
- determining when the client is compromised based on security data for the client;
- and
- in response to the determinations that the client is a single-user device and is not compromised, causing extension of the session between the authenticated user on the client and the web server system.
A non-transitory computer readable medium having stored thereon instructions comprising executable code that, when executed by one or more processors, causes the processors to:
- receive request data for a request from a client to a web server system, the request comprising a session identifier (ID) for a session between an authenticated user and the web server system;
- obtain user identifier (UID) data for the client;
- determine when the client is a single-user device based on the UID data, wherein the UID data corresponds to one or more users that have previously used the client to successfully authenticate with two or more web server systems;
- determine when the client is compromised based on security data for the client;
- and
- in response to the determinations that the client is a single-user device and is not compromised, cause extension of the session between the authenticated user on the client and the web server system.
A security system, comprising one or more security server devices, server devices, or clients with memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:
- receive request data for a request from a client to a web server system, the request comprising a session identifier (ID) for a session between an authenticated user and the web server system;
- obtain user identifier (UID) data for the client;
- determine when the client is a single-user device based on the UID data, wherein the UID data corresponds to one or more users that have previously used the client to successfully authenticate with two or more web server systems;
- determine when the client is compromised based on security data for the client;
- and
- in response to the determinations that the client is a single-user device and is not compromised, cause extension of the session between the authenticated user on the client and the web server system.
Dependencies are inferred from the claim text.