Session data integrity verification
AssigneeUab 360 It
InventorsDomininkas Virbickas, Kamil Danek, Vakaris Noreika
Life of this patent
Estimating the term…
Abstract
A request including a cookie directed from a user device to a target device is received at a validation software. The cookie is a data structure stored on the user device by a web browser to track session information. The cookie is hashed to obtain a hashed cookie. A validation request containing a subset of the hashed cookie is transmitted to a validation server. A response indicating that the subset of the hashed cookie matches a hash of a compromised cookie is received from the validation server. An alert of a potential session compromise is output at the user device based on the response.
Claims20
A method comprising:
- receiving, at a validation software, a request including a cookie directed from a user device to a target device, the cookie being a data structure stored on the user device by a web browser to track session information;
- hashing the cookie to obtain a hashed cookie;
- transmitting, to a validation server, a validation request containing a portion of the hashed cookie, wherein the portion of the hashed cookie has a length less than a length of the hashed cookie;
- receiving, from the validation server, a response indicating that the portion of the hashed cookie matches a hash of a compromised cookie;
- and
- outputting, at the user device, an alert of a potential session compromise based on the response.
A device, comprising:
- a memory that is non-transitory;
- and
- a processor, the processor configured to execute instructions stored in the memory to:
- receive, at a validation software, a request including a cookie directed from a user device to a target device, the cookie being a data structure stored on the user device by a web browser to track session information;
- hash the cookie to obtain a hashed cookie;
- transmit, to a validation server, a validation request containing a portion of the hashed cookie, wherein the portion of the hashed cookie has a length less than a length of the hashed cookie;
- receive, from the validation server, a response indicating that the portion of the hashed cookie matches a hash of a compromised cookie;
- and
- output, at the user device, an alert of a potential session compromise based on the response.
A non-transitory computer readable medium storing instructions operable to cause a processor to perform operations comprising:
- receiving, at a validation software, a request including a cookie directed from a user device to a target device, the cookie being a data structure stored on the user device by a web browser to track session information;
- hashing the cookie to obtain a hashed cookie;
- transmitting, to a validation server, a validation request containing a portion of the hashed cookie, wherein the portion of the hashed cookie has a length less than a length of the hashed cookie;
- receiving, from the validation server, a response indicating that the portion of the hashed cookie matches a hash of a compromised cookie;
- and
- outputting, at the user device, an alert of a potential session compromise based on the response.
Dependencies are inferred from the claim text.