Patent ID: 7945774
Filing Date: 2011-05-17
Classification: H04L

Abstract:
1. A method for a cross domain request to allow a first entity, the Masher, to establish at a second entity, the User, a secure mashup by obtaining information from, or taking actions at, a third entity, the Mashee; the method comprising: configuring a processor to perform the steps of: (a) the Masher entity sending a first SSL Client-Hello handshake message, to the Mashee entity, via the User entity, wherein the Masher entity authenticates the User entity; (b) the Mashee entity replying by sending a second SSL Server-Hello handshake message to the Masher entity, via the User entity, wherein the Mashee entity authenticates the User entity; (c) the Masher entity replying by sending a third SSL Client-Key-Exchange handshake message to the Masher entity, via the User entity; (d) the Mashee entity replying by sending a fourth SSL Server-Finished handshake message, via the User entity; (e) the Masher entity and the Mashee entity agreeing on a master-secret not known to the User entity; (f) the Mashee entity and the Masher entity securely communicating further by exchanging SSL Application Data messages either via the User entity, or directly; (g) the Mashee entity sending the Masher a message including a cross-domain-authorization-token encrypted by said master secret, which includes information that scopes cross domain access privileges and a token validity time, in either the fourth SSL Server-Finished handshake message, via the User entity, or in a subsequent SSL Application-Data message; (h) the Masher entity sending the User entity the unencrypted cross-domain-authorization token; (i) the User entity sending the cross-domain-authorization-token to the Mashee; and, (j) the Mashee validating the cross-domain-authorization-token before processing the cross domain request to determine, based on an identity of said Masher entity, whether a request presented by said User entity can access a resource from said Mashee entity.