Christopher L Osgood

US Patent:

8364968, Jan 29, 2013

Filed:

May 17, 2007

Appl. No.:

11/750077

Inventors:

David T Corcoran - Hamilton IN, US
Christopher Osgood - Poquoson VA, US

Assignee:

Symantec Corporation - Mountain View CA

International Classification:

H04L 29/06

US Classification:

713182, 713185, 713186

Abstract:

The present invention involves one or more computers that provide software controls to enable a web application to interface with a personal trusted device. The server side of the computer system comprises: a server-based framework process; a device for receiving requests from the client computer and determining which software controls to send in response; and a device for digitally signing and encrypting the software controls before sending them to the client computer so that their authenticity can be verified. The client side of the computer system comprises: a client web browser that runs on a computer; a device for transmitting requests to the server computer and for receiving responses from those requests; a device for decrypting software controls so that the authenticity of their digital signature can be verified; and a connection to one or more personal trusted devices. An authentication proxy may be used to mutually authenticate a client user and server process using personal trusted devices.