Patent ID: 8689295

Claim:
A method for validating a communication sent from a client computer to an application server, the method comprising the steps of: a security server intercepting a first HTML document describing a first electronic form sent by the client computer addressed to the application server before the first form is processed by the application server, and in response, the security server generating a signature based on session information that is contained in the first HTML document but is not displayed during rendering of the first HTML document, and forwarding the first HTML document with the signature to the application server; in response to the first HTML document forwarded from the security server, the application server processing the first form, and returning to the client computer a second HTML document for a second, related form, the second HTML document for the related form having the session information which was the basis for the signature, the signature not being displayed during rendering of the related form; and the security server intercepting the second HTML document for the related form with the signature subsequently sent by the client computer addressed to the application server before the related form is processed by the application server, the related form having data entered by the user, and in response, the security server determining that the signature in the second HTML document matches the signature from the first HTML document, and in response, the security server forwarding to the application server the second HTML document for the related form for processing by the application server.