The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 25, 2019

Filed:

Jan. 24, 2017
Applicant:

Box, Inc., Redwood City, CA (US);

Inventors:

Lev Kantorovskiy, Mountain View, CA (US);

Kechen Huang, San Francisco, CA (US);

Nakul Chander, San Francisco, CA (US);

Anil Chaurasia, San Francisco, CA (US);

Benjamin Kus, San Francisco, CA (US);

Assignee:

Box, Inc., Redwood City, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); H04L 29/08 (2006.01);
U.S. Cl.
CPC ...
H04L 63/10 (2013.01); H04L 63/0807 (2013.01); H04L 63/0815 (2013.01); H04L 67/02 (2013.01); H04L 67/10 (2013.01); H04L 67/141 (2013.01); H04L 67/146 (2013.01); H04L 67/2814 (2013.01); H04L 67/42 (2013.01); H04L 63/083 (2013.01); H04L 63/0861 (2013.01);
Abstract

Techniques are described for separating subdomains as part of a secure login process. For example the subdomains can correspond to an enterprise user or personal user accounts, or both. The login process involves responding to a login request with an assertion, such as for example a redirect based assertion, that includes an encrypted data structure with account and user information necessary for identification of the corresponding subdomain. The encrypted data structure includes browser-, IP address, and user-specific information to thwart a cross-site request forgery (CSRF) security vulnerability, among other things.


Find Patent Forward Citations

Loading…