Patent ID: 8495137
Filing Date: 2013-07-23
Classification: G06F,G06Q,H04L

Abstract:
1. A computer-implemented method for preventing security attacks between a client and a server, comprising: embedding a nonce and a script in a response from the server to the client in a session wherein, the script is adapted such that when executed at the client following receipt of the response from the server, the script automatically adds the nonce to each future request sent from the client to the server in the session; sending the response with the nonce and the script embedded therein to the client; and verifying that each future request received at the server from the client in the session includes the nonce, wherein: sending a verification response to the client, if the nonce in the parameter is not identical to the nonce in the session cookie, to confirm that the request was intended by a user; and processing the request if the request is confirmed as being intended by the user, otherwise rejecting the request.