IP Library Granted Patent US 10,122,830
Granted Patent B2
US 10,122,830 · App. 15/233,672 · Granted Nov 6, 2018

Validation associated with a form

Inventors: Jincheng Lin (Hangzhou, CN); Hexiang Yang (Hangzhou, CN)
Assignee: Alibaba Group Holding Limited
H04L67/42G06F17/243G06F21/55H04L63/1416G06F17/3089H04L63/1441
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,122,830
App. No.
15/233,672
Granted
Nov 6, 2018
Kind
B2
Abstract

Form validation is disclosed, including: generating a first parameter and a second parameter in response to a request for a form from a client device; sending a first triggering message including the first parameter and the second parameter to the client device; receiving data associated with submission of the form; and determining whether the data associated with the submission of the form includes the hidden form field that matches the first parameter and a submitted value corresponding to the hidden form field that corresponds to the second parameter, in the event that the hidden form field matches the first parameter and the submitted value corresponding to the hidden form field corresponds to the second parameter, determine that the data associated with the submission of the form is successfully validated.

Claims (60)

1. A system for form validation, comprising:

a processor; and

a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:

generate a first parameter and a second parameter in response to a request for a form from a client device, wherein at least one of the first parameter and the second parameter is randomly generated;

generate a defined variable, wherein the defined variable is configured to be assigned as a temporary value corresponding to a hidden form field to be generated at the client device;

send a first triggering message including the defined variable, the first parameter, and the second parameter to the client device, wherein the first triggering message is configured to:

cause the hidden form field to be generated at the client device based at least in part on the first parameter and to be added to the form;

cause the defined variable to be assigned as a temporary value corresponding to the generated hidden form field on the client device; and

cause replacement of the temporary value corresponding to the hidden form field with a validation string in response to detection by the client device of a value assignment event related to a human interaction with the client device, wherein the validation string is determined based on the second parameter;

send an additional hidden field triggering message to the client device, wherein the additional hidden field triggering message is configured to cause an additional hidden form field to be generated and added to the form, wherein the additional hidden form field is not used for validation of the form;

receive data associated with submission of the form, the form including the additional hidden form field and a randomly generated value assigned to the additional hidden form field to enhance security;

determine whether the data associated with the submission of the form includes the hidden form field that matches the first parameter and a submitted value corresponding to the hidden form field that corresponds to the second parameter; and

in response to a determination that the hidden form field matches the first parameter and the submitted value corresponding to the hidden form field corresponds to the second parameter, determine that the data associated with the submission of the form is successfully validated.

2. The system of claim 1 , wherein the processor is further configured to:

generate a third parameter; and

send a second triggering message including the third parameter to the client device, wherein the second triggering message is configured to cause the third parameter to be used as a function name associated with a hidden form field generation function at the client device.

3. The system of claim 1 , wherein the value assignment event comprises one or more of the following: a mouse movement, a keyboard operation, and a touch screen operation.

4. The system of claim 1 , wherein determining whether the data associated with the submission of the form includes the hidden form field that matches the first parameter comprises determining whether a name of the hidden form field matches the first parameter.

5. The system of claim 1 , wherein the processor is further configured to:

store the validation string with a session;

store the validation string with an expiration period; and

in response to a determination that the form to which the hidden form field is added is submitted after the expiration period, determine that the data associated with the submission of the form is not successfully validated.

6. A method for form validation, comprising:

generating, using one or more processors, a first parameter and a second parameter in response to a request for a form from a client device, wherein at least one of the first parameter and the second parameter is randomly generated;

generating a defined variable, wherein the defined variable is configured to be assigned as a temporary value corresponding to a hidden form field to be generated at the client device;

sending a first triggering message including the defined variable, the first parameter, and the second parameter to the client device, wherein the first triggering message is configured to:

cause the hidden form field to be generated at the client device based at least in part on the first parameter and to be added to the form;

cause the defined variable to be assigned as a temporary value corresponding to the generated hidden form field on the client device; and

cause replacement of the temporary value corresponding to the hidden form field with a validation string in response to detection by the client device of a value assignment event related to a human interaction with the client device, wherein the validation string is determined based on the second parameter;

sending an additional hidden field triggering message to the client device, wherein the additional hidden field triggering message is configured to cause an additional hidden form field to be generated and added to the form, wherein the additional hidden form field is not used for validation of the form;

receiving data associated with submission of the form, the form including the additional hidden form field and a randomly generated value assigned to the additional hidden form field to enhance security;

determining whether the data associated with the submission of the form includes the hidden form field that matches the first parameter and a submitted value corresponding to the hidden form field that corresponds to the second parameter; and

in response to a determination that the hidden form field matches the first parameter and the submitted value corresponding to the hidden form field corresponds to the second parameter, determine that the data associated with the submission of the form is successfully validated.

7. The method of claim 6 , further comprising:

generating a third parameter; and

sending a second triggering message including the third parameter to the client device, wherein the second triggering message is configured to cause the third parameter to be used as a function name associated with a hidden form field generation function at the client device.

8. The method of claim 6 , wherein the value assignment event comprises one or more of the following: a mouse movement, a keyboard operation, and a touch screen operation.

9. The method of claim 6 , further comprising:

storing the validation string with a session;

storing the validation string with an expiration period; and

in response to a determination that the form to which the hidden form field is added is submitted after the expiration period, determining that the data associated with the submission of the form is not successfully validated.

10. A computer program product being embodied in a non-transitory computer readable medium and comprising computer instructions for:

generating a first parameter and a second parameter in response to a request for a form from a client device, wherein at least one of the first parameter and the second parameter is randomly generated;

generating a defined variable, wherein the defined variable is configured to be assigned as a temporary value corresponding to a hidden form field to be generated at the client device;

sending a first triggering message including the defined variable, the first parameter, and the second parameter to the client device, wherein the first triggering message is configured to:

cause the hidden form field to be generated at the client device based at least in part on the first parameter and to be added to the form;

cause the defined variable to be assigned as a temporary value corresponding to the generated hidden form field on the client device; and

cause replacement of the temporary value corresponding to the hidden form field with a validation string in response to detection by the client device of a value assignment event related to a human interaction with the client device, wherein the validation string is determined based on the second parameter;

sending an additional hidden field triggering message to the client device, wherein the additional hidden field triggering message is configured to cause an additional hidden form field to be generated and added to the form, wherein the additional hidden form field is not used for validation of the form;

receiving data associated with submission of the form, the form including the additional hidden form field and a randomly generated value assigned to the additional hidden form field to enhance security;

determining whether the data associated with the submission of the form includes the hidden form field that matches the first parameter and a submitted value corresponding to the hidden form field that corresponds to the second parameter; and

in response to a determination that the hidden form field matches the first parameter and the submitted value corresponding to the hidden form field corresponds to the second parameter, determining that the data associated with the submission of the form is successfully validated.

11. The computer program product of claim 10 , further comprising computer instructions for:

generating a third parameter; and

sending a second triggering message including the third parameter to the client device, wherein the second triggering message is configured to cause the third parameter to be used as a function name associated with a hidden form field generation function at the client device.

12. The computer program product of claim 10 , wherein the value assignment event comprises one or more of the following: a mouse movement, a keyboard operation, and a touch screen operation.

13. The computer program product of claim 10 , further comprising computer instructions for:

storing the validation string with a session;

storing the validation string with an expiration period; and

in response to a determination that the form to which the hidden form field is added is submitted after the expiration period, determining that the data associated with the submission of the form is not successfully validated.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 21, 2026
From: ALIBABA GROUP HOLDING LIMITED
To: CLOUD INTELLIGENCE ASSETS HOLDING (SINGAPORE) PRIVATE LIMITED
Reel/Frame 075478/0225 →
Priority Claims (1)
CN 2012 1 0059741 · Mar 8, 2012 · national
Continuity (2)
Continuation 13787259 · Mar 6, 2013
Related Publication 20170034314A1 · Feb 2, 2017