Loading patent…
AssigneeOpentext Corporation
InventorsConrado Eduardo Poole Siguero, Sandip Chitale, Derek Zasiewski
Estimating the term…
Systems and methods for secure stateless client-server communication. User credentials in a client authorization request are authenticated and used to generate a JSON web token (JWT). The JWT header and signature are encrypted and included in an HTTP-only cookie. The JWT payload is encrypted and sent to the client in a response body along with the HTTP-only cookie. Each subsequent client request includes the cookie and has the encrypted JWT payload in the request header. Upon receiving the request, the server decrypts the encrypted JWT payload from the header and decrypts the encrypted JWT header and signature from the cookie, then reconstructs the JWT from the JWT header, payload and signature. The server validates the JWT and, if valid, processes the request according to authorizations in the JWT payload.
A method for stateless processing over a network, comprising:
A system for stateless processing over a network, comprising:
A computer program product comprising a non-transitory computer readable medium storing instructions executable by a processor to perform a method for stateless processing over a network, the method comprising:
Dependencies are inferred from the claim text.