The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 14, 2023
Filed:
Oct. 27, 2022
Qomplx, Inc., Tysons, VA (US);
Randy Clayton, Frederick, MD (US);
Jason Crabtree, Vienna, VA (US);
Luka Jurukovski, Arlington, VA (US);
Richard Kelley, Woodbridge, VA (US);
Angadbir Singh Salaria, Herndon, VA (US);
Andrew Sellers, Monument, CO (US);
Farooq Israr Ahmed Shaikh, Reston, VA (US);
QOMPLX LLC, New York, NY (US);
Abstract
A system and methods for detecting and mitigating golden SAML attacks against federated services is provided, comprising an authentication object inspector configured to observe a new authentication object generated by an identity provider, and retrieve the new authentication object; and a hashing engine configured to create a security cookie for each valid authentication session; wherein subsequent access requests accompanied by authentication objects are validated by checking for a valid security cookie.