Patents by Inventor Ka Fu Chan

Ka Fu Chan has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Method and apparatus for securely invoking a rest API
    Patent number: 8621598
    Abstract: An embodiment of the present invention provides a system that enables a user to securely invoke a REST (Representational State Transfer) API (Application Programming Interface) at an application server. A client can establish a secure communication channel with an application server, and can send a request to the application server to invoke the REST API. The client can then receive a security token from an authentication system in response to authenticating the user with the authentication system. Next, the client can receive a nonce and a timestamp from the application server. The client can then determine a security token digest using the security token, the nonce, and the timestamp. Next, the client can resend the request to the application server to invoke the REST API with the security token digest. The application server can invoke the REST API if the security token digest is valid.
    Type: Grant
    Filed: March 12, 2008
    Date of Patent: December 31, 2013
    Assignee: Intuit Inc.
    Inventors: Ray Y. Lai, Ka Fu Chan
  • METHOD AND APPARATUS FOR SECURELY INVOKING A REST API
    Publication number: 20090235349
    Abstract: An embodiment of the present invention provides a system that enables a user to securely invoke a REST (Representational State Transfer) API (Application Programming Interface) at an application server. A client can establish a secure communication channel with an application server, and can send a request to the application server to invoke the REST API. The client can then receive a security token from an authentication system in response to authenticating the user with the authentication system. Next, the client can receive a nonce and a timestamp from the application server. The client can then determine a security token digest using the security token, the nonce, and the timestamp. Next, the client can resend the request to the application server to invoke the REST API with the security token digest. The application server can invoke the REST API if the security token digest is valid.
    Type: Application
    Filed: March 12, 2008
    Publication date: September 17, 2009
    Applicant: INTUIT INC.
    Inventors: Ray Y. Lai, Ka Fu Chan