IP Library Granted Patent US 8,433,906
Granted Patent B2
US 8,433,906 · App. 12/787,688 · Granted Apr 30, 2013

Method and system for microlocking web content

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,433,906
App. No.
12/787,688
Granted
Apr 30, 2013
Kind
B2
Abstract

A method and system for ensuring the authenticity of server returned information displayed at a client browser is provided. The method comprises receiving the server returned information at a client computer; storing a copy of the server returned information at the client computer; inspecting the server returned information for one or more locked objects; allowing the client browser to operate one or more client installed scripts; inspecting the server returned information for any modifications to the one or more locked objects; and in response to determining that the one or more client installed scripts have made modifications to the one or more locked objects, replacing the modified locked objects with unmodified versions of the locked objects from the stored copy of the server returned information.

Claims (47)

1. A method to ensure authenticity of server returned information at a client browser comprising:

receiving the server returned information at a client computer;

storing a copy of the server returned information at the client computer;

inspecting the server returned information for one or more locked objects;

allowing the client browser to operate one or more client installed scripts;

inspecting the server returned information for any modifications to the one or more locked objects; and

in response to determining that the one or more client installed scripts have made modifications to the one or more locked objects, replacing the modified locked objects with unmodified versions of the locked objects from the stored copy of the server returned information.

2. The method of claim 1 , wherein the server returned information comprises one or more web pages.

3. The method of claim 2 , wherein the client computer stores a document object model skeleton for the one or more web pages.

4. The method of claim 1 , further comprising:

calculating a first checksum for each of the one or more locked objects; and

calculating a second checksum for each of the one or more locked objects after operation of the one or more client installed scripts, wherein the step of inspecting further comprises comparing the first checksum to the second checksum.

5. The method of claim 1 , further comprising:

replacing each of the one or more locked objects with a corresponding reference tag; and

after operation of the one or more client installed scripts, replacing each of the corresponding reference tags with unmodified versions of the locked objects from the stored copy of the server returned information.

6. The method of claim 1 , further comprising:

replacing each of the one or more locked objects with a corresponding encrypted version of the one or more locked objects; and

after operation of the one or more client installed scripts, replacing each of the corresponding encrypted versions with unmodified versions of the locked objects from the stored copy of the server returned information.

7. The method of claim 1 , wherein the one or more locked objects comprise at least one of a username, a password, a credit card number, a social security number, personal identification number.

8. A system for ensuring authenticity of server returned information at a client browser, the system comprising a client computer coupled to a web server via a network, the client computer comprising a memory and a processor operable to run security software that intercepts server returned information at the client computer, stores a copy of the server returned information at the client computer, inspects the server returned information for one or more locked objects, allows the client browser to operate one or more client installed scripts, inspects the server returned information for any modifications to the one or more locked objects, and in response to determining that the one or more client installed scripts have made modifications to the one or more locked objects, replaces the modified objects with unmodified versions of the objects from the stored copy of server returned information.

9. The system of claim 8 , wherein the server returned information comprises one or more web pages.

10. The system of claim 9 , wherein the client computer stores a document object model skeleton for the one or more web pages.

11. The system of claim 8 , wherein the processor is further operable to calculate a first checksum for each of the one or more locked objects,

calculate a second checksum for each of the one or more locked objects after operation of the one or more client installed scripts, and compare the first checksum to the second checksum to determine if the one or more client installed scripts have made any modifications to the one or more locked objects.

12. The system of claim 8 , wherein the processor is further operable to replace each of the one or more locked objects with a corresponding reference tag, and

after operation of the one or more client installed scripts, replace each of the corresponding reference tags with unmodified versions of the locked objects from the stored copy of the server returned information.

13. The system of claim 8 , wherein the processor is further operable to replace each of the one or more locked objects with a corresponding encrypted version of the one or more locked objects, and after operation of the one or more client installed scripts, replace each of the corresponding encrypted versions with unmodified versions of the locked objects from the stored copy of the server returned information.

14. The system of claim 8 , wherein the one or more locked objects comprise at least one of a username, a password, a credit card number, a social security number, personal identification number.

15. A computer program product for ensuring authenticity of server returned information at a client browser comprising:

a storage medium readable by a processor and storing instructions for operation by the processor for performing a method comprising:

receiving the server returned information at a client computer;

storing a copy of the server returned information at the client computer;

inspecting the server returned information for one or more locked objects;

allowing the client browser to operate one or more client installed scripts;

inspecting the server returned information for any modifications to the one or more locked objects; and

in response to determining that the one or more client installed scripts have made modifications to the one or more locked objects, replacing the modified locked objects with unmodified versions of the locked objects from the stored copy of the server returned information.

16. The computer program product of claim 15 , wherein the server returned information comprises one or more web pages.

17. The computer program product of claim 16 , wherein the client computer stores a document object model skeleton for the one or more web pages.

18. The computer program product of claim 15 , further comprising:

calculating a first checksum for each of the one or more locked objects; and

calculating a second checksum for each of the one or more locked objects after operation of the one or more client installed scripts, wherein the step of inspecting further comprises comparing the first checksum to the second checksum.

19. The computer program product of claim 15 , further comprising:

replacing each of the one or more locked objects with a corresponding reference tag; and

after operation of the one or more client installed scripts, replacing each of the corresponding reference tags with unmodified versions of the locked objects from the stored copy of the server returned information.

20. The computer program product of claim 15 , further comprising:

replacing each of the one or more locked objects with a corresponding encrypted version of the one or more locked objects; and

after operation of the one or more client installed scripts, replacing each of the corresponding encrypted versions with unmodified versions of the locked objects from the stored copy of the server returned information.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: AIRBNB, INC.
Reel/Frame 056427/0193 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 27, 2010
From: JAMJOOM, HANI T.; SAHA, DEBANJAN; SAHU, SAMBIT
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 024448/0313 →