Invention Grant
- Patent Title: Authentication of a server by a client to prevent fraudulent user interfaces
- Patent Title (中): 由客户端验证服务器以防止欺诈用户界面
-
Application No.: US12686495Application Date: 2010-01-13
-
Publication No.: US08776199B2Publication Date: 2014-07-08
- Inventor: Ismail Cem Paya , Trevin Chow , Christopher N. Peterson
- Applicant: Ismail Cem Paya , Trevin Chow , Christopher N. Peterson
- Applicant Address: US WA Redmond
- Assignee: Microsoft Corporation
- Current Assignee: Microsoft Corporation
- Current Assignee Address: US WA Redmond
- Agent Bryan Webster; Andrew Sanders; Micky Minhas
- Main IPC: H04L9/32
- IPC: H04L9/32 ; H04L9/00 ; H04L29/06

Abstract:
Protecting a user against web spoofing in which the user confirms the authenticity of a web page prior to submitting sensitive information such as user credentials (e.g., a login name and password) via the web page. The web page provides the user with an identifiable piece of information representing a shared secret between the user and the server. The user confirms the correctness of the shared secret to ensure the legitimacy of the web page prior to disclosing any sensitive information via the web page.
Public/Granted literature
- US20100115594A1 AUTHENTICATION OF A SERVER BY A CLIENT TO PREVENT FRAUDULENT USER INTERFACES Public/Granted day:2010-05-06
Information query