Back to results
US 9,882,882 B2Granted
Methods and systems of data security in browser storage
Assigneesalesforce.com, inc.
InventorAkhilesh Gupta
Life of this patent
Estimating the term…
Abstract
Mechanisms and methods are provided for managing OAuth access in a database network system, and extending the OAuth flow of authentication to securely store the OAuth encrypted refresh token in the storage available with current browsers or any other non-secure storage on user system.
Claims13
A non-transitory machine readable medium storing one or more machine instructions, which when invoked cause a processor to implement a method comprising:
- at a server that includes at least a processor system having at least one processor and memory system, receiving a passcode and content, wherein the content comprises at least a refresh token;
- in response to the receiving the passcode and the content, performing the following,
- placing, by the server, the content and passcode into a file/blob;
- creating, by the server, a unique encryption key;
- encrypting, by the server, the file having the content and the passcode as a 1-way hash generated using a cryptographic hash function with the unique encryption key;
- and
- sending from the server to the user system the encrypted data and a unique identifier for the encrypted file having the passcode and content.
4 more elements
A non-transitory machine readable medium storing one or more machine instructions, which when invoked cause a processor to implement a method comprising:
- receiving, at a server that includes at least a processor system having at least one processor and memory system, a passcode and encrypted content and a unique key identifier, wherein the content comprises at least a refresh token;
- in response to the receiving, performing the following,
- querying a local database for the encryption key based on the key identifier;
- decrypting the encrypted content with the key;
- determining whether the passcode stored previously within the content and the passcode provided by the user match one another;
- and
- returning the decrypted content to the user if the passcode decrypted and the passcode provided by the user match one another;
- wherein prior to the receiving of the encrypted passcode and encrypted content and the unique key identifier, receiving at the server, from a user device, the content and the passcode for encryption;
- in response,
- creating, by the server, a file;
- placing, by the server, the passcode and content in the file,
- generating, by the server, a unique encryption key and unique identifier of the key,
- storing in a storage location of the memory system the unique encryption key in association with a unique identifier,
- encrypting, by the server, the file in which the passcode and content were placed with the unique encryption key, therein creating the encrypted passcode and the encrypted content;
- sending from the server to the user device the encrypted file and the unique key identifier for storage at the user device.
12 more elements
Dependencies are inferred from the claim text.