PATENT CLAIM ANALYSIS

Application Number: 16173198
Application Type: Utility
Filing Date: 2018-10
Publication Date: 2019-02
Patent Classification: ["726", "004000"]

Abstract:
A secure client-server connection method compatible with RESTful (REpresentational State Transfer) APIs (Application Programming Interface) that is resistant to cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks. The server generates a token for the client and a random value which it pairs with the token. The random value is hashed. The hash value is transmitted to the client contained in the token and the random value is transmitted to the client contained in an HTTPOnly cookie. Even if an attacker steals the token and/or the hash, security is maintained, since the server verifies communications from the client by validating the token on the basis of its hash value. Validation is performed by the server hashing the random value contained in the HTTPOnly cookie paired with the token to obtain a further hash value, and checking that this further hash value matches the token's hash value.

Claim (Index 4):
The method as recited in  claim 1 , wherein the client-side credential is a token.

Metadata:
- Claim Count in Document: 9.0
- Percentile: 97.0
- Lexical Diversity: 2.07595
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15486596', '12821116', '14508797', '12564087', '13647615']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.2786321275471671
- 35 USC 102 Novelty (BERT): 0.5405867231325532
- Combined Prediction Score: 0.3048275871057058
- Mean Citation Score: 229.032948
- Max Citation Score: 386.39694
- Similarity Product: 286.0422155415416

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 0
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test