IP Library Granted Patent US 10,362,049
Granted Patent B2
US 10,362,049 · App. 15/291,443 · Granted Jul 23, 2019

Security-risk plugin to help targeted users interact with web pages and applications

Inventors: Susann M. Keohane (Austin, TX); Gary P. Noble (Worcestershire, GB); Johnny Meng-Han Shieh (Austin, TX); Adam J. Storm (Toronto, CA)
Assignee: International Business Machines Corporation
H04L63/1433G06Q50/265H04L63/0823
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,362,049
App. No.
15/291,443
Granted
Jul 23, 2019
Kind
B2
Abstract

The present disclosure relates to techniques for helping targeted users determine whether it is safe to supply personal information requested by a web site. In one embodiment, a method generally includes extracting textual content from a web page that requests information from a user and determining, based on the textual content, the type of information requested. A service type the web page provides is also determined based on the textual content. The service type and the information type are then compared to a set of predefined rules to determine a risk level associated with the web page. A visual indicator of the risk level is then displayed with the web page.

Claims (65)

1. A method comprising:

extracting text content from a web page, wherein the web page includes one or more elements supporting input from a user;

determining, based on the text content, an information type the one or more elements are designed to collect from the user;

determining, based on the text content, a service type the web page provides;

determining, based on the information type and the service type, a risk level associated with the web page;

displaying a visual indicator of the risk level with the web page;

determining that the risk level meets a predefined threshold;

disabling the one or more elements based on the risk level;

sending a message to a designated assistance provider requesting assistance with the one or more elements on behalf of the user;

activating a remote assistance mode, wherein the remote assistance mode allows the designated assistance provider to control a mouse cursor for the user remotely; and

streaming a view of a screen displayed to the user to the designated assistance provider.

2. The method of claim 1 , further comprising:

receiving an indication from the designated assistance provider requesting to re-enable one or more elements; and

re-enabling the one or more elements based on the indication.

3. The method of claim 1 , further comprising:

determining a respective individualized risk level for each of the one or more elements; and

highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.

4. The method of claim 1 , further comprising:

comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and

determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.

5. The method of claim 1 , further comprising:

determining that the risk level does not meet a predefined threshold; and

displaying the visual indicator of the risk level to indicate to the user that the risk level does not meet the predefined threshold.

6. A non-transitory computer-readable storage medium containing instructions that, when executed by one or more processors, perform an operation for helping users determine whether it is safe to supply personal information to a web site, the operation comprising:

extracting text content from a web page, wherein the web page includes one or more elements supporting user-input;

determining, based on the text content, an information type of the user-input that the one or more elements are designed to collect;

determining, based on the text content, a service type the web page provides;

determining, based on the information type and the service type, a risk level associated with the web page;

displaying a visual indicator of the risk level with the web page;

determining that the risk level meets a predefined threshold;

disabling the one or more elements based on the risk level;

sending a message to a designated assistance provider requesting assistance with the one or more elements on behalf of the user;

activating a remote assistance mode, wherein the remote assistance mode allows the designated assistance provider to control a mouse cursor for the user remotely; and

streaming a view of a screen displayed to the user to the designated assistance provider.

7. The non-transitory computer-readable storage medium of claim 6 , wherein the operation further comprises:

receiving an indication from the designated assistance provider requesting to re-enable one or more elements; and

re-enabling the one or more elements based on the indication.

8. The non-transitory computer-readable storage medium of claim 6 , wherein the operation further comprises:

determining a respective individualized risk level for each of the one or more elements; and

highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.

9. The non-transitory computer-readable storage medium of claim 6 , wherein the operation further comprises:

comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and

determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.

10. A system for helping users determine whether it is safe to supply personal information to a web site, the system comprising:

one or more processors; and

a memory storing one or more applications that, when executed on the one or more processors, perform an operation, the operation comprising:

extracting text content from a web page, wherein the web page includes one or more elements supporting user-input,

determining, based on the text content, an information type of the user-input that the one or more elements are designed to collect,

determining, based on the text content, a service type the web page provides,

determining, based on the information type and the service type, a risk level associated with the web page,

displaying a visual indicator of the risk level with the web page;

determining that the risk level meets a predefined threshold;

disabling the one or more elements based on the risk level;

sending a message to a designated assistance provider requesting assistance with the one or more elements on behalf of the user;

activating a remote assistance mode, wherein the remote assistance mode allows the designated assistance provider to control a mouse cursor for the user remotely; and

streaming a view of a screen displayed to the user to the designated assistance provider.

11. The system of claim 10 , wherein the operation further comprises:

receiving an indication from the designated assistance provider requesting to re-enable one or more elements; and

re-enabling the one or more elements based on the indication.

12. The system of claim 10 , wherein the operation further comprises:

determining a respective individualized risk level for each of the one or more elements; and

highlighting each of the one or more elements on the web page according to a coloring scheme, wherein each respective element is highlighted with a respective color that indicates the respective individualized risk level.

13. The system of claim 10 , wherein the operation further comprises:

comparing the service type and the information type to a set of predefined rules, wherein at least one rule maps text to a risk level; and

determining the risk level associated with the web page based on the comparison of the service type and the information type to the set of predefined rules.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 15, 2021
From: INTERNATIONAL BUSINESS MACHINES CORPORATION
To: AIRBNB, INC.
Reel/Frame 056427/0193 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 12, 2016
From: KEOHANE, SUSANN M.; NOBLE, GARY P.; SHIEH, JOHNNY MENG-HAN; STORM, ADAM J.
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 039997/0586 →
Continuity (1)
Related Publication 20180103055A1 · Apr 12, 2018