域门户上的安全内容传递
阅读说明:本技术 域门户上的安全内容传递 (Secure content delivery on a domain portal ) 是由 西蒙·A·布莱克斯坦 奥伦·哈菲夫 伊泰·杜乌德瓦尼 俄林·阿尔夫·埃林森 于 2017-03-02 设计创作,主要内容包括:在一个实施例中,一种方法包括:响应于登录请求,生成第一标识符和第一派生标识符;向客户端设备发送第一标识符和第一派生标识符;从客户端设备接收对网页的请求,其中,该请求包括第二标识符;响应于内容请求,生成第二派生标识符;以及提供内容框架和可信框架用于显示在客户端设备上,其中,内容框架包括第二派生标识符。第一派生标识符可以存储在可信框架可访问而内容框架不可访问的位置。可信框架可以被配置为访问存储在可信框架可访问的位置中的第一派生标识符,并验证从内容框架接收的第二派生标识符与第一派生标识符匹配。(In one embodiment, a method comprises: generating a first identifier and a first derived identifier in response to the login request; sending the first identifier and the first derivative identifier to the client device; receiving a request for a web page from a client device, wherein the request includes a second identifier; generating a second derivative identifier in response to the content request; and providing the content framework and the trusted framework for display on the client device, wherein the content framework includes the second derivative identifier. The first derivative identifier may be stored in a location accessible to the trusted frame and inaccessible to the content frame. The trusted framework may be configured to access a first derivative identifier stored in a location accessible to the trusted framework and verify that a second derivative identifier received from the content framework matches the first derivative identifier.)