公开(公告)号：US20210288794A1

公开(公告)日：2021-09-16

申请号：US17069561

申请日：2020-10-13

Applicant: ORACLE INTERNATIONAL CORPORATION

Inventor： Kevin Ross O'Neill ,  Daniel Music Vogel ,  Girish Nagaraja ,  Shobhank Sharma

IPC: H04L9/08 ,  H04L9/14 ,  H04L9/32

Abstract: Techniques are provided for establishing a session with an application using asymmetric cryptography. Techniques include secure single-sign on capabilities using asymmetric cryptography. With asymmetric signatures, the use of browser local storage and the Web Crypto application programming interface (API), the key cannot be extracted from the browser that it was generated for. The mechanism allows a web domain to track a user login session using a non-extractable asymmetric key stored in the client's web browser, and leverage the non-extractable asymmetric key for single sign-on.

公开(公告)号：US11121863B1

公开(公告)日：2021-09-14

申请号：US17069561

申请日：2020-10-13

Applicant: ORACLE INTERNATIONAL CORPORATION

Inventor： Kevin Ross O'Neill ,  Daniel Music Vogel ,  Girish Nagaraja ,  Shobhank Sharma

IPC: H04L9/08 ,  H04L9/14 ,  H04L9/32

Abstract: Techniques are provided for establishing a session with an application using asymmetric cryptography. Techniques include secure single-sign on capabilities using asymmetric cryptography. With asymmetric signatures, the use of browser local storage and the Web Crypto application programming interface (API), the key cannot be extracted from the browser that it was generated for. The mechanism allows a web domain to track a user login session using a non-extractable asymmetric key stored in the client's web browser, and leverage the non-extractable asymmetric key for single sign-on.