Back to results
US 8,019,881 B2Granted
Secure cookies
AssigneeGeorge Mason Intellectual Properties, Inc.
InventorsRavi Sandhu, Joon S. Park
Life of this patent
Estimating the term…
Abstract
The present invention relates to methods and systems for creating secure cookies. The methods can be used to create, receive, and transmit secure cookies, confidential cookies, and authentication cookies.
Claims18
A key cookie, said key cookie being a secure cookie comprising:
- a) a domain field capable of holding domain data to associate said key cookie to a domain where said key cookie is valid;
- b) at least one name field capable of holding name data;
- c) at least one value field capable of holding value data derived from conforming client data;
- d) an expiration field capable of holding cookie expiration data;
- and
- e) an encrypted session key, said encrypted session key capable of being used for encrypting said value data contained in another of said at least two secure cookie;
- and
- wherein:
- 1. said key cookie is created for use in transferring secure data between a client and a server;
- 2. said client capable of presenting said conforming client data;
- 3. said server capable of using said conforming client data to create at least two of said secure cookie;
- 4. at least one of said at least two secure cookie capable of being transported between said server and said client over a network;
- 5. at least one of said at least two secure cookie capable of being stored in a client storage;
- and
- 6. said client capable of being authenticated by a secure attribute service between said client and said server, said secure attribute service capable of comparing said conforming client data with said value data when authenticating said client.
12 more elements
A seal cookie, said seal cookie being a secure cookie comprising:
- a) a domain field capable of holding domain data to associate said seal cookie to a domain where said seal cookie is valid;
- b) at least one name field capable of holding name data;
- c) at least one value field capable of holding value data derived from conforming client data;
- and
- d) an expiration field capable of holding cookie expiration data;
- and
- wherein:
- 1. said seal cookie is created for use in transferring secure data between a client and a server;
- 2. said client capable of presenting said conforming client data;
- 3. said server capable of using said conforming client data to create at least two of said secure cookie;
- 4. at least one of said at least two secure cookie capable of being transported between said server and said client over a network;
- 5. at least one of said at least two secure cookie capable of being stored in a client storage;
- 6. said client capable of being authenticated by a secure attribute service between said client and said server, said secure attribute service capable of comparing said conforming client data with said value data when authenticating said client;
- and
- 7. said seal cookie capable of being used by said server to determine if at least one of another of said at least two secure cookie has been altered.
12 more elements
Dependencies are inferred from the claim text.