Patent ID: 9154570
Filing Date: 2015-10-06
Classification: G06F,H04L

Abstract:
1. A device for preventing a Cross-Site Request Forgery (CSRF) attack, the device comprising: a request intercepting module that intercepts one or more requests sent from a client browser to a server; a token generating module that generates a token and records the token on the device as a recorded token; a response generating module that generates a response to the one or more requests; a token inserting module that inserts the recorded token into the response to the one or more requests; and a response sending module that sends the response to the one or more requests to the client browser with the recorded token inserted in the one or more requests; wherein the request intercepting module intercepts a request that is sent from the client browser to the server after the response to the one or more requests is sent to the client browser; and wherein the device further comprises: