Facebook, Inc.

Oren Hafif

Erling Alf Ellingsen

Itay Duvdevani

Roy Udassin

Simon A Blackstein

In one embodiment, a method includes a system receiving a request from a user's device, the request being directed to a first host. The system may generate a key, a verification token, and an encrypted key. The system may transmit the verification token and the encrypted key to the device from the first host, and transmit instructions configured to cause (1) the verification token to be stored as a cookie associated with the first host, and (2) the device to transmit the encrypted key to a second host. The system may receive a second request comprising the encrypted key from the device, and decrypt it to obtain the key upon determining that the encrypted key was not previously decrypted. The system may transmit the key to the device from the second host, and instruct the device to store the key as a cookie associated with the second host.

Systems and methods for preventing session fixation over a domain portal

In one embodiment, a method includes sending a login request to a server computing device; receiving a first derivative identifier from the server computing device; storing the first derivative identifier; sending a content request to the server computing device for a web page; receiving, from the server computing device, a content frame and a trusted frame for display on the client device, wherein the content frame comprises a second derivative identifier; according to instructions associated with the content frame, requesting the trusted frame to verify whether the second derivative identifier matches the first derivative identifier; according to instructions associated with the trusted frame, verifying whether the second derivative identifier matches the stored first derivative identifier; and displaying the requested web page in the content frame based on a verification confirmation from the trusted frame that the second derivative identifier matches the stored first derivative identifier.

Growing community of inventors

London, United Kingdom

Oren Hafif