Patent ID: 8838973
Filing Date: 2014-09-16
Classification: H04L

Abstract:
1. A computer-implemented method of guaranteeing session integrity between a user at a client machine and a server, comprising: obtaining, from the server, reflective information comprising a URL of the server, certificate for the server, and a session key; sending a request for access to information on the server by the client machine; receiving a request by the client machine from the server to transmit a user reflective one-time password (ROTP) from the client machine to the server; combining parameters comprising a cryptographic key, a one-time password (OTP) information, and the reflective information by concatenating each of the cryptographic key, the OTP, and the reflective information; generating a user ROTP by using a secure cryptographic algorithm on the combined parameters; and transmitting the generated user ROTP to the server.