Sekundärdatenverschlüsselung über Browsererweiterung

Details

Veröffentlichungs-Nr.

EP4496268

Aktenzeichen

EP24188358

Anmeldetag

12. Juli 2024

Veröffentlichung

22. Januar 2025

Rechtsraum

EP

IPC

H04L9/40H04L67/02H04W12/03H04W12/041H04W12/69

Abstract

Methods, systems, and apparatuses are described herein for protecting sensitive data even when Transport Layer Security (TLS) communication sessions are compromised. A computing device may send, via a web browser plugin of a web browser application executing on the computing device and to one or more remote servers, a request for a server secret that comprises a device fingerprint, an identification of the web browser application, and an identification of the web browser plugin. The computing device may receive the server secret and a public certificate associated with the remote server. The computing device may establish, via the web browser application, a TLS session with the one or more remote servers. The computing device may generate a session key. The computing device may receive data comprising unencrypted data and encrypted data. The computing device may decrypt the encrypted data based on the session key.

Anmelder

Firma

Capital One Services, LLC

Land

🇺🇸 USA

Fachgebiete