ForgeRock. has filed a patent for a method that securely attaches access tokens to browser-based requests without exposing them to malicious code. The technology involves identity and secrets management proxies running in an iFrame, ensuring safe communication between apps and resource servers. GlobalData’s report on ForgeRock gives a 360-degree view of the company including its patenting strategy. Buy the report here.
Smarter leaders trust GlobalData
According to GlobalData’s company profile on ForgeRock, Grid computing was a key innovation area identified from patents. ForgeRock's grant share as of January 2024 was 53%. Grant share is based on the ratio of number of grants to total number of patents.
Securely attaching access tokens to browser-based requests for resource servers
The patent application (Publication Number: US20230412596A1) describes a computer-implemented method for securely attaching an access token to a browser-based request to a resource server on behalf of a first app loaded by a webpage. The method involves the use of an identity proxy and a secrets management proxy running in an iFrame on the browser running the first app. The identity proxy determines which network requests should be relayed via the secrets management proxy, which in turn provides access token management services transparently to the request when communicating with the resource server. This process ensures that the access token is not exposed to any malicious apps loaded by the webpage along with the first app.
Furthermore, the identity proxy intercepts access requests from the first app to the resource server, reroutes them via the secrets management proxy, and forwards them to the resource server with the access token attached. The secrets management proxy then receives responses from the resource server, forwards them to the identity proxy, and returns them to the first app without exposing the access token to either the first app or any malicious apps. This method effectively safeguards the access token while allowing the first app to securely interact with the resource server, enhancing the overall security of browser-based requests made by the first app.
To know more about GlobalData’s detailed insights on ForgeRock, buy the report here.
Data Insights
From
The gold standard of business intelligence.
Blending expert knowledge with cutting-edge technology, GlobalData’s unrivalled proprietary data will enable you to decode what’s happening in your market. You can make better informed decisions and gain a future-proof advantage over your competitors.
GlobalData, the leading provider of industry intelligence, provided the underlying data, research, and analysis used to produce this article.
GlobalData Patent Analytics tracks bibliographic data, legal events data, point in time patent ownerships, and backward and forward citations from global patenting offices. Textual analysis and official patent classifications are used to group patents into key thematic areas and link them to specific companies across the world’s largest industries.
