Techniques for reliable network authentication
AssigneeAmazon Technologies, Inc.
InventorJesper M. Johansson
Life of this patent
Estimating the term…
Abstract
Disclosed are various embodiments of techniques that may be used to improve the reliability of network authentication. A communication session is established between a server computing device and a client computing device. The communication session is established via a network using a credential for a network site. A verifier for the credential is generated, which may be used to confirm the authenticity of the credential. The verifier is provided to the client computing device via the network.
Claims20
A non-transitory computer-readable medium embodying a program executable in a client device, wherein when executed the program causes the client device to at least:
- establish a communication session with a web server of a server computing device, the communication session being established via a network using an offered credential for a website served by the web server, the communication session using secure socket layer/transport layer security (SSL/TLS);
- receive signature data for the website, the signature data specifying a location of a first verifier for the website, the first verifier being based at least in part upon an authentic credential of the website;
- receive the first verifier for the website, the first verifier being present in content of the website and being located using the signature data;
- retrieve a second verifier for the website, the second verifier being stored in the client device and based at least in part upon a recognized credential of the website, the recognized credential being obtained from at least one previous communication session;
- generate a validation of the offered credential obtained, via an intermediate network device of the network by the client device, the validation using the first verifier and the second verifier for the website;
- and
- initiate a re-negotiation of the communication session in response to a failure of the validation.
A system, comprising:
- a data store storing verifier data;
- at least one computing device in communication with the data store;
- and
- at least one application executable in the at least one computing device, wherein when executed the at least one application causes the at least one computing device to at least:
- establish a communication session with a web server via a network using an offered credential for the web server;
- receive signature data for the web server that specifies a location of a first verifier, the first verifier being based at least in part upon an authentic credential of the web server;
- retrieve the first verifier using the location specified in the signature data;
- retrieve a second verifier stored in the data store, the second verifier being based at least in part upon a recognized credential of the web server obtained from at least one previous communication session;
- and
- generate a validation of the offered credential using the first verifier and the second verifier.
A method, comprising:
- establishing, via at least one of one or more computing devices, a communication session with a network page server via a network using an offered credential for the network page server;
- receiving, via at least one of the one or more computing devices, signature data for the network page server that specifies a location of a first verifier;
- retrieving, via at least one of the one or more computing devices, the first verifier using the location specified in the signature data;
- retrieving, via at least one of the one or more computing devices, a second verifier stored in a data store, the second verifier being based at least in part data obtained from at least one previous communication session;
- and
- generating, via at least one of the one or more computing devices, a validation of the offered credential using the first verifier and the second verifier.
Dependencies are inferred from the claim text.