Granted Patent B2

US 9,780,951 · App. 13/931,120 · Granted Oct 3, 2017

Inventors: Simon Hunt (Naples, FL); Balbir Singh (Gurgaon, IN); Nitin Munjal (Gurgaon, IN); Nitin Jaglan (New Delhi, IN)

Assignee: McAfee, Inc.

H04L9/3223H04L63/0428H04L63/08H04L63/12

Abstract

Claims (41)

1. A system for security of a network communication request comprising a processor, a memory, an encrypt/decrypt module, and a communication module, the system configured to:

receive the network communication request from a client, the network communication request having a content parameter;

generate a hash of the content parameter;

subsequent to generation of the hash of the content parameter, append the hash of the content parameter to the content parameter to generate a string of content parameters comprising the content parameter and the hash of the content parameter;

generate a session variable that is unique to the client, wherein the session variable is a random variable, and wherein only the communication module is provided access to the session variable;

encrypt the string of content parameters using the session variable;

communicate portions of a result of the network communication request to the client incorporating the encrypted string of content parameters;

receive a subsequent request from the client, the subsequent request associated with the network communication request;

authenticate the subsequent request by verifying that the encrypted string of content parameters returns with the subsequent request; and

as a result of authenticating the subsequent request, complete the network communication request.

2. The system of claim 1 , wherein the network communication request is a web request.

3. The system of claim 1 , wherein the session variable is further associated with the network communication request.

4. The system of claim 1 , wherein the subsequent request is an asynchronous JavaScript and extensible markup language (AJAX) request.

5. The system of claim 1 , wherein the hash is a cryptographic hash.

6. A method for network communications, comprising:

receiving, at a server, a network communication request from a client, the network communication request comprising a request for a content parameter;

generating a hash of the content parameter;

subsequent to generating the hash of the content parameter, appending the hash of the content parameter to the content parameter to generate, at the server, a string of content parameters comprising the content parameter and the hash of the content parameter;

generating, at the server, a session variable that is unique to the client, wherein the session variable is a random variable, and wherein only the server is provided access to the session variable;

encrypting, at the server, the string of content parameters using the session variable;

communicating portions of a result of the network communication request to the client incorporating the encrypted string of content parameters;

receiving, at the server, a subsequent request from the client, the subsequent request associated with the network communication request;

authenticating the subsequent request by verifying that the encrypted string of content parameters returns with the subsequent request; and

as a result of authenticating the subsequent request, completing the network communication request.

7. The method of claim 6 , wherein the network communication request is a web request.

8. The method of claim 6 , wherein the session variable is further associated with the network communication request.

9. The method of claim 6 , wherein the subsequent request is an asynchronous JavaScript and extensible markup language (AJAX) request.

10. The method of claim 6 , wherein the hash is a cryptographic hash.

11. One or more non-transitory computer readable storage medium, comprising computer-executable instructions carried on the one or more computer readable storage medium, the instructions readable by a processor, the instructions, when read and executed, causing the processor to:

receive a network communication request from a client, the network communication request comprising a request for a content parameter;

generate a hash of the content parameter;

subsequent to generation of the hash of the content parameter, append the hash of the content parameter to the content parameter to generate a string of content parameters comprising the content parameter and the hash of the content parameter;

generate a session variable that is unique to the client, wherein the session variable is a random variable, and wherein only the processor is provided access to the session variable;

encrypt the string of content parameters using the session variable;

communicate portions of a result of the network communication request to the client incorporating the encrypted string of content parameters;

receive a subsequent request from the client, the subsequent request associated with the network communication request;

authenticate the subsequent request by verifying that the encrypted string of content parameters returns with the subsequent request; and

as a result of authenticating the subsequent request, complete the network communication request.

12. The medium of claim 11 , wherein the network communication request is a web request.

13. The medium of claim 11 , wherein the session variable is further associated with the network communication request.

14. The medium of claim 11 , wherein the subsequent request is an asynchronous JavaScript and extensible markup language (AJAX) request.

Assignments (10)

Priority Claims (1)

Continuity (1)