Patent ID: 8332654
Filing Date: 2012-12-11
Classification: H04L

Abstract:
1. A method for securely invoking a server-side Application Programming Interface (API), the method comprising: receiving, from a client-side component of a Web application, a request to invoke an API hosted on a server; wherein the request is generated by a client device executing instructions written in a scripting language, the executed instructions displaying a visual presentation for a user on the client device; and asynchronously sending the request to invoke the API hosted on the server; in response to receiving the request to invoke the API hosted on the server, invoking a security handler hosted on the server, the security handler configured to process the request in a manner that mitigates a plurality of different types of security attacks; wherein the plurality of different types of security attacks includes at least replay attacks, and the security handler is configured to prevent a replay attack; invoking the API on the server; and sending a response comprising output data generated by the API to the client-side component; wherein receipt of the response causes only a portion of the visual presentation corresponding to changed data to be updated without refreshing the entire display.