Beacon cloud reputation service
A technique for determining the safety of the content of beacon transmissions. A user device extracts beacon identification information from a beacon transmission. The user device queries the beacon registry to obtain the targeted content. The user device provides the targeted content and beacon identification information to a validation service. The validation service evaluates the targeted content and the beacon identification information for safety. The validation service determines a score based on that evaluation and sends the score to the user device. The user device alerts the user or performs background actions such as suppression of transmission of beacon contextual data to other apps on user device based on the score.
1. A storage device comprising instructions which, when executed, cause a machine to at least:
receive beacon identification information and beacon content associated with a beacon, the beacon content obtained based on a beacon registry uniform resource locator received from the beacon, the beacon content including a uniform resource locator;
determine whether the beacon identification information identifies a known beacon;
determine a safety level of the beacon content by:
accessing a hyper transport protocol uniform resource locator included in the beacon content; and
parsing a response associated with the access to identify malicious scripts of the response;
generate a beacon safety score for the beacon based on the safety level, a history of safety scores for the beacon, and whether the beacon is in a well-reputed geo-physical location; and
send the beacon safety score to a requester.
2. The storage device of claim 1 , wherein the beacon safety score includes a value derived from the safety level of the beacon content of the beacon and the beacon identification information.
3. The storage device of claim 1 , wherein the instructions, when executed, cause the machine to evaluate at least one of a manufacturing origin of the beacon, a geo-physical location of the beacon, or historical activity associated with the beacon.
4. The storage device of claim 1 , wherein the instructions, when executed, cause the machine to base the beacon safety score on a value corresponding to the beacon content of the beacon.
5. The storage device of claim 1 , wherein the beacon identification information includes at least one of hardware information associated with the beacon, telemetry information associated with the beacon, malicious data information associated with the beacon, data indicative of trustworthiness of manufacturing origin of the beacon, data indicative of whether the beacon occupies the well-reputed geo-physical location, or data indicative of known historical activity associated with the beacon.
6. The storage device of claim 1 , wherein the instructions, when executed, cause the machine to store the beacon safety score.
7. The storage device of claim 1 , wherein the instructions, when executed, cause the machine to access the hyper transport protocol uniform resource locator of the beacon content in an isolated environment.
8. A system for determining safety of beacon transmissions, the system comprising:
a validation service;
at least one memory;
instructions included in the system; and
a first processor to execute the instructions to at least:
extract beacon identification information and a beacon registry uniform resource locator from a beacon transmission, the beacon transmission originating from a beacon;
send beacon content and the beacon identification information to the validation service, the beacon content obtained by accessing a beacon registry using the beacon registry uniform resource locator; and
determine a safety of the beacon based on a beacon safety score;
a second processor of the validation service to execute the instructions to:
determine whether the beacon identification information identifies a known beacon;
determine a safety level of the beacon content by:
accessing a hyper transport protocol uniform resource locator included in the beacon content; and
parsing a response associated with the access to identify malicious scripts of the response; and
generate the beacon safety score for the beacon based on the safety level, a history of safety scores for the beacon, and whether the beacon is in a well-reputed geo-physical location.
9. The system of claim 8 , wherein the first processor is to suppress the beacon content of the beacon based on the beacon safety score.
10. The system of claim 8 , wherein the first processor is to identify the beacon registry.
11. The system of claim 8 , wherein the beacon safety score indicates at least one of whether the beacon is safe and whether the beacon content is safe.
12. The system of claim 11 , wherein the beacon safety score indicates at least one of whether the beacon has a trusted manufacturing origin, a well-reputed geo-physical location, or known historical activity.
13. The system of claim 8 , wherein the first processor is to extract the beacon identification information from the beacon transmission by:
extracting a beacon identifier from the beacon transmission;
extracting registry information from the beacon transmission; and
computing contextual information, the contextual information including at least one of a geo-physical location, a time transmission received, or a contextual location associated with the beacon.
14. The system of claim 13 , wherein the registry information includes an address of a private beacon registry.
15. The system of claim 13 , wherein the first processor is to present a visual representation indicative of the beacon content based on the beacon safety score, the visual representation including a first color when at the beacon safety score corresponds to a safe score, a second color when the beacon safety score corresponds to an uncertain score, and a third color when the beacon safety score corresponds to an unsafe score.
16. A method for suppressing beacon transmissions, the method comprising:
extracting, by executing an instruction with at least one processor, beacon identification information and a beacon registry uniform resource locator from a beacon transmission, the beacon transmission originating from a beacon;
sending beacon content and the beacon identification information to a validation service, the beacon content obtained by accessing a beacon registry using the beacon registry uniform resource locator;
receiving, from the validation service, a beacon safety score, the beacon safety score based on a search for malicious code corresponding to the beacon content, a history of safety scores for the beacon, and whether the beacon is in a well-reputed geo-physical location; and
presenting, by executing an instruction with the at least one processor, a visual representation indicative of the beacon content based on the beacon safety score, the visual representation including a first color when at the beacon safety score corresponds to a safe score, a second color when the beacon safety score corresponds to an uncertain score, and a third color when the beacon safety score corresponds to an unsafe score; and
suppressing propagation of the beacon transmission based on the beacon safety score.
17. The method of claim 16 , wherein the suppressing includes evaluating the beacon safety score against a set of user preferences.
18. The method of claim 17 , wherein the set of user preferences includes acceptable times of day to receive the beacon transmissions.
19. The method of claim 17 , wherein the set of user preferences includes acceptable types of the beacon transmissions.
20. The method of claim 16 , further including notifying a user of received suppressed beacon transmissions.