/Patent Tracker
GoogleGranted patentSecurity & privacyInterest 3/10

Google patents secure login method that resets sessions after failed checks

This patent describes a way for servers to verify client connections using digital signatures. If a signature check fails, the server rejects the connection and requires the client to send a new key and proof of execution to start a fresh session.

Why it mattersIt offers a specific technical method for recovering from failed security checks in distributed systems, which is standard practice for maintaining robust network connections.

In the filing’s own words

Methods and systems for implementing cryptographically protected sessions in distributed computing systems are described herein. A server receives, from a client, a first request including a first payload and a first cryptographic signature of the first payload. The server attempts to validate the first cryptographic signature by using a stored public key associated with the client. Responsive to failing to validate the first cryptographic signature, the server transmits an invalid session response to the client. The server then receives, from the client, a second request including a second payload and a second cryptographic signature of the second payload. The second payload includes a new public key associated with the client. Responsive to validating the second cryptographic signature by using the new public key, the server establishes a new session associated with the client.

What exactly they claim (claim 1)

1. A method, comprising: receiving, by a server, a first request originated by a client, wherein the first request comprises a first payload and a first cryptographic signature of the first payload; attempting to validate, using a stored public key associated with the client, the first cryptographic signature; responsive to failing to validate the first cryptographic signature, transmitting, to the client, an invalid session response; receiving, from the client, a second request comprising a second payload and a second cryptographic signature of the second payload, wherein the second payload comprises: (i) a new public key associated with the client and (ii) a cryptographic digest of an executable script executed by the client in order to apply a predefined transformation to a value of a session state variable; validating, using the new public key, the second cryptographic signature; and responsive to validating the second cryptographic signature, establishing a new session associated with the client.

Facts

Company
Google (Google LLC)
Official title
Implementing cryptographically protected sessions in distributed computing system
Patent number
US12750236B2
Application number
18630966
Filed
Apr 9, 2024
Granted
Sep 29, 2026
Inventors
1
Claims
20

Classified under

H04L 9/3247 Electricity & electronicsH04L 9/0877 Electricity & electronicsH04L 63/068 Electricity & electronicsH04L 63/126 Electricity & electronics
Read the full filing (official PDF) ↗ Open in the Patent Tracker

More from Google in Security & privacy

Summaries are simplified from the filing’s own abstract and first claim. A patent filing is not a product announcement.
Patent data and drawings: U.S. Patent and Trademark Office (USPTO). Nebula is not affiliated with or endorsed by the USPTO.