Patent ID: 8694784

Claim:
A computer-implemented method for secure client-side key storage for authentication tracking, the method being executed using one or more processors and comprising: establishing, by a browser executed on a client-side computing device, a mutual authentication between the client-side computing device and a server-side computing device, the client-side computing device comprising the one or more processors, and the server-side computing device executing an application; in response to establishing the mutual authentication, receiving a session signing key (SSK) at a sub-domain of an application domain, the sub-domain comprising a static script that handles the SSK and that selectively provides request signatures; receiving, at the sub-domain, a message requesting a request signature; determining that the message originated from an authentic origin; and in response to determining that the message originated from an authentic origin, providing a request signature to a source of the message, the request signature being based on the SSK.