The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Sep. 24, 2024

Filed:

May. 31, 2022
Applicant:

Open Text Corporation, Waterloo, CA;

Inventors:

Conrado Eduardo Poole Siguero, San Francisco, CA (US);

Sandip Chitale, Pleasanton, CA (US);

Derek Zasiewski, Oakville, CA;

Assignee:

OPEN TEXT CORPORATION, Waterloo, CA;

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 9/40 (2022.01); H04L 9/32 (2006.01); H04L 67/02 (2022.01);
U.S. Cl.
CPC ...
H04L 63/0807 (2013.01); H04L 9/3247 (2013.01); H04L 63/10 (2013.01); H04L 67/02 (2013.01);
Abstract

Systems and methods for secure stateless client-server communication. User credentials in a client authorization request are authenticated and used to generate a JSON web token (JWT). The JWT header and signature are encrypted and included in an HTTP-only cookie. The JWT payload is encrypted and sent to the client in a response body along with the HTTP-only cookie. Each subsequent client request includes the cookie and has the encrypted JWT payload in the request header. Upon receiving the request, the server decrypts the encrypted JWT payload from the header and decrypts the encrypted JWT header and signature from the cookie, then reconstructs the JWT from the JWT header, payload and signature. The server validates the JWT and, if valid, processes the request according to authorizations in the JWT payload.


Find Patent Forward Citations

Loading…