Facebook, Inc.

Erling Alf Ellingsen

Changhao Jiang

Itay Duvdevani

Oren Hafif

Roy Udassin

Simon A Blackstein

In one embodiment, a method includes a system receiving a request from a user's device, the request being directed to a first host. The system may generate a key, a verification token, and an encrypted key. The system may transmit the verification token and the encrypted key to the device from the first host, and transmit instructions configured to cause (1) the verification token to be stored as a cookie associated with the first host, and (2) the device to transmit the encrypted key to a second host. The system may receive a second request comprising the encrypted key from the device, and decrypt it to obtain the key upon determining that the encrypted key was not previously decrypted. The system may transmit the key to the device from the second host, and instruct the device to store the key as a cookie associated with the second host.

Systems and methods for preventing session fixation over a domain portal

In one embodiment, a method includes sending a login request to a server computing device; receiving a first derivative identifier from the server computing device; storing the first derivative identifier; sending a content request to the server computing device for a web page; receiving, from the server computing device, a content frame and a trusted frame for display on the client device, wherein the content frame comprises a second derivative identifier; according to instructions associated with the content frame, requesting the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; according to instructions associated with the trusted frame, verifying whether the second derivative identifier matches the stored first derivative identifier; and displaying the requested web page in the content frame based on a verification confirmation from the trusted frame that the second derivative identifier matches the stored first derivative identifier.

Secure content delivery over a domain portal

In one embodiment, a method includes accessing local storage on a computing device to render a structured document. The structured document corresponds to a first domain or sub-domain and includes an inline-frame element that corresponds to a second domain or sub-domain. The local storage includes one or more first local-storage slots that are reserved for resources associated with the first domain or sub-domain and one or more second local-storage slots that are reserved for resources associated with the second domain or sub-domain. The method further includes loading one or more resources for rendering the structured document from the first local-storage slots and loading one or more resources for rendering the structured document from the second local-storage slots.

Efficient storage and retrieval of resources for rendering structured documents

In one embodiment, a method includes accessing local storage on the computing device. The local storage includes multiple local-storage slots that each currently correspond to a domain or sub-domain and includes one or more resources for a structured document associated with the particular domain or sub-domain. Each of the resources has a timestamp indicating when it was last used by the computing device. The method further includes identifying based on the timestamps one or more resources to be discarded from the local storage.

In one embodiment, a method includes accessing a resource list associated with a structured document loaded by a client application executing within a client device; identifying a first set of resources referenced in the resource list that are stored within a storage space of the client device; retrieving the first set of resources from the storage space; loading the first set of resources into a model representation of the structured document generated by a client document-rendering application for rendering by the client document-rendering application; identifying a second set of resources referenced in the resource list that are not stored within the storage space of the client device; formulating and transmitting one or more requests for the second set of resources; receiving the second set of resources in response to the requests; and loading the second set of resources into the model representation for rendering by the client document-rendering application.

Growing community of inventors

Mountain View, CA, United States of America

Erling Alf Ellingsen