Back to results
US 12,615,156 B2Granted
Device linked session
AssigneeWells Fargo Bank, N.A.
InventorsNavin Argulkar, Upul D. Hanwella, Chintan Mehta, Anil K. Mishra
Life of this patent
Estimating the term…
Abstract
A device linked session connects the entity, whether device, application, or other, to a request for a session token. In subsequent uses of the token, the device identity is checked to avoid a token being used by an entity that did not request the token.
Claims16
A non-transitory computer readable medium including instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
- receiving a request for a session token for a user, the request including an identification of an entity making the request, wherein the entity is at least one of an application or a device;
- recording the identification of the entity from the request;
- communicating a response to the request, the response including the session token;
- receiving a data request, the data request including:
- the session token;
- and
- a cryptographically signed version of the session token;
- determining that the session token from the data request is valid;
- determining that the cryptographically signed version of the session token originated from the entity using the identification of the entity;
- and
- communicating approval of the data request based on the session token being valid and the cryptographically signed version of the session token originating from the entity,
- wherein recording the identification of the entity includes:
- determining that the entity has not previously been registered;
- registering the entity in an entry in a datastore;
- creating a security tag based on the entry in a datastore, wherein the security tag includes a key-pair for the entity, and wherein a public component of the key-pair is used by the entity to create the cryptographically signed version of the session token;
- and
- including the security tag in the response to the request.
14 more elements
A method for a device linked session, the method comprising:
- receiving a request for a session token for a user, the request including an identification of an entity making the request, wherein the entity is at least one of an application or a device;
- recording the identification of the entity from the request;
- communicating a response to the request, the response including the session token;
- receiving a data request, the data request including:
- the session token;
- and
- a cryptographically signed version of the session token;
- determining that the session token from the data request is valid;
- determining that the cryptographically signed version of the session token originated from the entity using the identification of the entity;
- and
- communicating approval of the data request based on the session token being valid and the cryptographically signed version of the session token originating from the entity,
- wherein recording the identification of the entity includes:
- determining that the entity has not previously been registered;
- registering the entity in an entry in a datastore;
- creating a security tag based on the entry in a datastore, wherein the security tag includes a key-pair for the entity, and wherein a public component of the key-pair is used by the entity to create the cryptographically signed version of the session token;
- and
- including the security tag in the response to the request.
14 more elements
Dependencies are inferred from the claim text.