Back to results
US 2025/0158829 A1Published application
Device linked session
AssigneeWells Fargo Bank, N.A.
InventorsNavin Argulkar, Upul D. Hanwella, Chintan Mehta, Anil K. Mishra
Life of this patent
Estimating the term…
Abstract
A device linked session connects the entity, whether device, application, or other, to a request for a session token. In subsequent uses of the token, the device identity is checked to avoid a token being used by an entity that did not request the token.
Claims20
A non-transitory computer readable medium including instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
- receiving a request for a session token, the request including an identification of an entity making the request;
- recording the identification of the entity from the request;
- communicating a response to the request, the response including the session token;
- receiving a data request, the data request including:
- the session token;
- and
- a cryptographically signed version of the session token;
- determining that the session token from the data request is valid;
- determining that the cryptographically signed version of the session token originated from the entity using the identification of the entity;
- and
- communicating approval of the data request based on the session token being valid and the cryptographically signed version of the session token originating from the entity.
8 more elements
A method for a device linked session, the method comprising:
- receiving a request for a session token, the request including an identification of an entity making the request;
- recording the identification of the entity from the request;
- communicating a response to the request, the response including the session token;
- receiving a data request, the data request including:
- the session token;
- and
- a cryptographically signed version of the session token;
- determining that the session token from the data request is valid;
- determining that the cryptographically signed version of the session token originated from the entity using the identification of the entity;
- and
- communicating approval of the data request based on the session token being valid and the cryptographically signed version of the session token originating from the entity.
8 more elements
Dependencies are inferred from the claim text.