Patent ID: 8402520
Filing Date: 2013-03-19
Classification: G06F,H04L

Abstract:
1. A system for authenticating communications in a network security service, the system comprising: a subscribing device configured to send a server authentication code as part of a first data set to a server computer, to receive a second data set from the server computer, and to validate the second data set by comparing the server authentication code originally sent by the subscribing device to the server computer against the server authentication code received by the subscribing device from the server computer; the server computer configured to receive the first data set from the subscribing device over an HTTP connection, the first data set including a service request for information about a network address and an encrypted device authenticator that the server computer decrypts to access a device authentication code for verifying if the device is authorized to send service requests to the server computer, the first data set further including the server authentication code sent by the subscribing device and that the server computer includes in the second data set sent by the server computer to the device over an HTTP connection in response to the service request, the server authentication code being configured to allow the subscribing device to verify that the second data set is from the server computer, the second data set containing information about the network address; wherein the network address comprises a URL and the information about the network address comprises a category of a website having the URL; and wherein the encrypted device authenticator included in a HTML form is encrypted using an encryption key provided during registration of the subscribing device to subscribe to the network security service.