-
公开(公告)号:US11343078B2
公开(公告)日:2022-05-24
申请号:US16927186
申请日:2020-07-13
发明人: Iftekhar Akoob , Bernard Wagner , Riaan Jacobs , Gerhard Gysbert Oosthuizen , Daniel Deetlefs Bester , Xolisa Solwandle , Petrus Johannes De Wet , Francois Archibald Nolte , Dino Dominique Rodrigues Alves , Philip Johannes Cornelis Nel
摘要: A method and system for secure input at a remote service are provided. In a method conducted at a secure input device, a hash operation is performed on a data structure including shared data, the shared data having been obtained from a remote service via an encrypted payload. User input for secure entry at the remote service is received and encoded by performing an operation on corresponding symbols of the user input and an output of the hash operation to output an encoded message, the user input and the encoded message having the same length. The encoded message is output for entry at the remote service.
-
公开(公告)号:US20210014051A1
公开(公告)日:2021-01-14
申请号:US16927186
申请日:2020-07-13
发明人: Iftekhar Akoob , Bernard Wagner , Riaan Jacobs , Gerhard Gysbert Oosthuizen , Daniel Deetlefs Bester , Xolisa Solwandle , Petrus Johannes De Wet , Francois Archibald Nolte , Dino Dominique Rodrigues Alves , Philip Johannes Cornelis Nel
摘要: A method and system for secure input at a remote service are provided. In a method conducted at a secure input device, a hash operation is performed on a data structure including shared data, the shared data having been obtained from a remote service via an encrypted payload. User input for secure entry at the remote service is received and encoded by performing an operation on corresponding symbols of the user input and an output of the hash operation to output an encoded message, the user input and the encoded message having the same length. The encoded message is output for entry at the remote service.
-
公开(公告)号:US11870769B2
公开(公告)日:2024-01-09
申请号:US17597361
申请日:2020-07-10
发明人: Daniël Deetlefs Bester , Gerhard Gysbert Oosthuizen , Francois Archibald Nolte , Petrus Johannes De Wet
CPC分类号: H04L63/0823 , H04L9/0894 , H04L9/3073 , H04L9/3268 , H04L9/3271
摘要: A system and method are provided for identifying a browser instance in a browser session between a server hosting a web domain and the browser instance executing on a user computing device. The method conducted at the browser instance includes obtaining a private key and a public key of a key pair unique to a combination of a web domain and the browser instance being used to access the web domain. The method includes obtaining a browser certificate issued for the key pair and storing the private key at a storage provided by the browser instance for use by the browser instance during an active browser session with the web domain. The private key is stored as unextractable from the storage and with configuration for use by the browser instance during an active browser session with the web domain in signing or cryptographic operations without the private key being revealed.
-
-