Method for providing web application security

Details Method for providing web application security Method for providing web application security

H - Electricity

04

L

H04L 29/06 (2006.01)

Patent

CA 2648997

A method for an HTTP server to decide whether a remote client is victim of a phishing ttack, comprising: - receiving a first HTTP request from the remote client on said HTTP Server; - responding to said first HTTP request, wherein a token is added to the response submitted to said remote client; - receiving a second HTTP request on said HTTP server; - judging whether the second HTTP request includes said token; - judging whether the token originates from said remote client; - processing the HTTP request when said remote client has really issued the second HTTP request.

L'invention concerne un procédé permettant à un serveur HTTP de décider si un client distant est victime d'une attaque par hameçonnage, comprenant : - la réception d'une première requête HTTP provenant du client distant sur ledit serveur HTTP; - la réponse à ladite première requête HTTP, un jeton étant ajouté à la réponse soumise audit client distant; - la réception d'une seconde requête HTTP sur ledit serveur HTTP; - la détermination du fait de savoir si la seconde requête HTTP comprend ledit jeton; - la détermination du fait de savoir si le jeton provient dudit client distant; - le traitement de la requête HTTP lorsque ledit client distant a réellement émis la seconde requête HTTP.

Affiliated with

Also associated with

Rating

Method for providing web application security does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method for providing web application security, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method for providing web application security will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFCA-PAI-O-1509325