Managing access to resources for enhanced resource security
AssigneePalo Alto Networks, Inc.
InventorsOhad Bobrov, Yan Aksenfeld
Life of this patent
Estimating the term…
Abstract
Access to shielded resources via a web browser is constrained. Based on detecting an attempt by a user to access a resource with a first password via an instance of a web browser, the web browser retrieves an encryption key associated with the requested resource. The web browser generates a message authentication code (MAC) based on the first password and the retrieved encryption key associated with the first resource (e.g., by encrypting the first password with the encryption key). The web browser submits the access request with the MAC for authentication of the MAC. If the MAC is authenticated, access to the resource via the web browser is granted.
Claims33
A method for comprising:
- detecting a first request for access to a first resource using a first password, wherein the first password corresponds to a user of a web browser;
- retrieving, by the web browser, a first encryption key associated with the first resource;
- generating a first Message Authentication Code (MAC) based on the first password and the first encryption key associated with the first resource;
- submitting the first request for access to the first resource with the first MAC;
- and
- based on authentication of the first MAC by an access control system, granting access to the first digital resource via the web browser.
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
(canceled)
A non-transitory machine-readable medium having program code stored thereon, the program code comprising instructions to:
- detect a first request for access to a first resource using a first password, wherein the first password corresponds to a user of a web browser;
- determine, by the web browser, whether a first encryption key associated with the first resource can be retrieved;
- based on retrieval of the first encryption key, generate a first message authentication code (MAC) based on the first password and the first encryption key associated with the first resource;
- submit the first request for access to the first resource with the first MAC;
- and
- determine whether to grant the web browser access to the first resource, wherein the instructions to determine whether to grant the web browser access to the first resource comprise instructions to, based on authentication of the first MAC by an access control system, grant access to the first resource via the web browser.
A system comprising:
- a first user equipment having an instance of a secure web browser installed thereon,
- wherein the secure web browser is programmed to,
- detect an attempt by a user to access to a first resource using a first password;
- determine if a first encryption key associated with the first resource can be retrieved;
- based on retrieval of the first encryption key, generate a first message authentication code (MAC) based on the first password and the first encryption key associated with the first resource;
- and
- submit a first request for access to the first resource with the first MAC;
- and
- a data processing hub accessible via an IP (internet protocol) address, wherein the data processing hub is programmed to,
- based on authentication of the first MAC, grant access to the first resource via the secure web browser.
Dependencies are inferred from the claim text.