Secure account creation

A non-transitory computer-readable medium with instructions stored therein, the instructions, when executed by a processor, cause the processor to perform operations, the operations comprising:

• presenting, in a first application on a device, one or more account creation forms;
• storing user-supplied data in the form;
• bundling the one or more forms into a message payload;
• sending the message payload to a second application on the device to be signed;
• receiving a signed bundle from the second application;
• and
• sending the signed bundle to an account creation server.

A non-transitory computer-readable medium with instructions stored therein, the instructions, when executed by a processor, cause the processor to perform operations on an account creation server, the operations comprising:

• receiving a request to create a secure session with a device;
• sending information for the secure session to the device;
• receiving a signed message to begin the secure session;
• verifying the signed message according to a configuration file stored on the account creation server;
• sending the device a response containing an opaque server security token;
• and
• processing a request to create an online store account using timing heuristics to detect automated account creation.

A non-transitory computer-readable medium with instructions stored therein, the instructions, when executed by a processor, cause the processor to perform operations at an electronic device, the operations comprising:

• retrieving and verifying a signed configuration file from a server;
• requesting a communication session using the configuration file;
• receiving a message containing an opaque server security token;
• using settings in the configuration file to verify the message containing the opaque server security token;
• requesting authentication information from a user;
• signing a message containing the authentication information according to the configuration file;
• and
• sending the message to the server.

A non-transitory computer-readable medium with instructions stored therein, the instructions, when executed by a processor, cause the processor to perform operations at an electronic device, the operations comprising:

• creating a message with a purchase identifier and a vendor identifier associated with an item for purchase from an online store;
• signing the message according to a server security configuration file;
• sending the message and an opaque server security token to an online store
• receiving a signed receipt and an opaque server security token;
• and
• using settings in the configuration file to verify the signed receipt.

A computer-implemented method at an electronic device comprising:

• retrieving a signed configuration file from a server;
• cryptographically verifying the signed configuration file from a server;
• requesting a communication session using settings in the configuration file;
• receiving a message payload from a network client configured to render web pages on the electronic device comprising data from one or more account creation forms with user-fillable data;
• signing the message payload according to settings in the configuration file;
• and
• transmitting the signed message and payload to the server.

A computer-implemented method at a data processing system used for account creation, the method comprising:

• receiving a request to create a time-sensitive secure communications session with a device;
• creating a secure session with an electronic device and sending information to begin the session to the device;
• receiving a signed message to begin the time-sensitive secure session;
• verifying the signed message according to a configuration file stored on the data processing system;
• sending the device a response containing an opaque server security token;
• receiving one or more requests for a locator for one or more account creation forms;
• sending a locator for the one or more account creation forms;
• receiving a message with a payload comprising:
• data from the one or more account creation forms,
• an opaque server security token, and
• a message signature;
• verifying the message signature using the opaque server security token;
• and
• creating an account using data from the one or more account creation forms.

A computer-implemented method at an electronic device, the method comprising:

• establishing a secure session with an online store;
• creating a message with a purchase identifier and a vendor identifier associated with an item for purchase from the online store;
• signing the message according to a server security configuration file;
• and
• sending the message and an opaque server security token to an online store, the opaque server security token including server security state.

A system comprising:

• a device including memory and one or more processors operatively coupled with the memory, the one or more processors to process instructions stored in memory to:
• retrieve and verify a signed configuration file from a server;
• request a communication session using the configuration file, wherein the communication session is time-limited and specific to a media purchasing application having an identifier to identify the application and allow the application to be authenticated by the server;
• receive a payload from a network client configured to render web pages;
• sign the payload according to the configuration file;
• and
• send the signed payload to the server.