发明授权
- 专利标题: Method for session security
- 专利标题(中): 会话安全的方法
-
申请号: US11765360申请日: 2007-06-19
-
公开(公告)号: US07849318B2公开(公告)日: 2010-12-07
- 发明人: Kai Zhang , Linlong Jiang
- 申请人: Kai Zhang , Linlong Jiang
- 申请人地址: US CA Sunnyvale
- 专利权人: Yahoo! Inc.
- 当前专利权人: Yahoo! Inc.
- 当前专利权人地址: US CA Sunnyvale
- 代理机构: Martine Penilla & Gencarella, LLP
- 主分类号: H04L9/32
- IPC分类号: H04L9/32 ; H04L29/06 ; H04K1/00 ; H04L9/00 ; H04L9/28
摘要:
A secret string is established so as to be known only to a client computing system and a server computing system. A non-encrypted version of a message, a message counter value, and first hash value are received by the server computing system from the client computing system. The first hash value, based on a content of the message, the message counter value, and the secret string, is generated at the client computing system using a first hash algorithm. Using the first hash algorithm, the server generates second hash value based on the content of the received message, the received message counter value, and the secret string. The server computing system accepts the received non-encrypted version of the message as authentic upon determining that the received message counter value is greater than a previously received message counter value and that the second hash value matches the first hash value.
公开/授权文献
- US20080320307A1 Method for Session Security 公开/授权日:2008-12-25
信息查询