Technology of the Month: "Secure Cookies"
Web servers and browsers typically use “Cookies” to capture information for subsequent online communications. Internet-based commerce is somewhat limited in using cookies because sensitive information can’t be securely stored and communicated in most instances. The "Secure Cookies," technology invented by George Mason University researcher Dr. Ravi Sandhu, offers a solution to this problem.
"Secure Cookies" technology protects against network and end-system threats by providing security services such as authentication, integrity, confidentiality and authorization within regular cookies. Sandhu’s new technology goes beyond simply encrypted cookies. It allows cookies to be stored securely in browsers and used in future sessions until they expire.
Market significance:
- Creates secure cookie tickets for pay-per-access websites with time-out features;
- Supports system designs using role-based access control; and
- Achieves greater security for user authentication than other techniques such as address authentication, password-based authentication, Kerberos authentication and standard digital signature methods.
If you’re interested in commercial opportunities for this technology, contact David Grossman in George Mason University’s Office of Technology Transfer at 703.993.4103. Grossman’s e-mail address is dgrossma@gmu.edu.