Patent ID: 6920560
Filing Date: 2005-07-19
Classification: H04L

Abstract:
1. In a system comprising a server and a computer communicatively connected together via an HTTP-based network, a method of establishing by the server a secure state between the server and a user operating the computer, said method comprising: receiving, from the computer, a user key comprising U bits, where U>0; creating, from said user key, a cryptographic key; encrypting, using said cryptographic key, user data; storing the encrypted user data in a cookie; naming the cookie by assigning name data to the cookie; sending the cookie to the computer for storage thereby; receiving the cookie from the computer; receiving said user key from the computer; recreating, from said user key, said cryptographic key; extracting the encrypted user data from the cookie; decrypting, using said cryptographic key, the encrypted user data; and establishing the secure state between the server and the user based on the decrypted user data.