Patent ID: 9338173
Filing Date: 2016-05-10
CPC Classification: H04L,H04W

Claim Text:
1. A method in a client terminal for enabling safe communication with a web server, the client terminal comprising a processor and a memory, the method comprising: obtaining a master key in a bootstrapping session with a bootstrapping server, obtaining a web page from the web server in a web session with the web server, wherein the web page comprises a HyperText Markup Language (HTML) form and a Javascript, determining a set of context parameters unique to said web session, obtaining an application-specific key based on said master key; creating a context-specific key based on said context parameters and said application-specific key, and indicating the created context-specific key to the Javascript that in turn indicates the context-specific key to the web server for verification of the client terminal in the web server if a context-specific key determined in the web server matches the context-specific key created by the client terminal.