Method and system for detecting fraudulent access to web resource

1. A method of detecting fraudulent access to a web resource, the web resource being hosted by a server, the method being executable by the server, the method comprising:

receiving, by the server, a first request to access the web resource by a first electronic device, the first request including a first cookie, the first cookie being a first encrypted cookie;

in response to receiving the first request, determining a time of creation of the first encrypted cookie;

converting, by the server, the first cookie into a second cookie, the converting comprises re-encrypting the first encrypted cookie into a second encrypted cookie in response to the time of creation being indicative of an age of the first encrypted cookie being above a predetermined threshold;

transmitting, by the server, the second cookie to the first electronic device for storing;

receiving, by the server, a second request to access the web resource by a second electronic device, the second request including a third cookie, the third cookie being a third encrypted cookie; and

determining, by the server, the second request to be a fraudulent request, the determining based on an analysis of the third cookie and the first cookie.

2. The method of claim 1 , wherein:

the first encrypted cookie includes a first user device ID associated with the first electronic device and a first time stamp indicative of a creation time of the first encrypted cookie:

the second encrypted cookie includes the first user device ID and a second time stamp indicative of the creation time of the second encrypted cookie;

the third encrypted cookie includes at least a second user device ID.

3. The method of claim 2 , wherein the server is coupled to a database, and the method further comprises: storing, by the server, an indication of the re-encryption of the first encrypted cookie to the second encrypted cookie within the database.

4. The method of claim 3 , wherein the determining the second request to be a fraudulent request comprises:

accessing the database to determine the second user device ID to be the same as the first user device ID.

5. The method of claim 4 , wherein the first electronic device is different from the second electronic device.

6. The method of claim 4 , wherein the first electronic device is the second electronic device.

7. The method of claim 1 , wherein the server is configured to store a first encryption key and a second encryption key, and wherein the method further comprises:

prior to receiving the first request, receiving a third request by the first electronic device;

generating the first encrypted cookie with the first encryption key;

transmitting the first encrypted cookie to the first electronic device for storage; and wherein:

re-encrypting by the server comprises:

decrypting the first encrypted cookie using the first encryption key;

re-encrypting the decrypted first encrypted cookie with the second encrypted key, the second encrypted cookie being different from the first encrypted cookie.

8. The method of claim 1 , wherein the method further comprises:

in response to determining the second request to be a fraudulent request, performing a restrictive action to the second request.

9. The method of claim 8 , wherein the restrictive action is one of:

denying the second request;

granting limited access to the web resource.

10. A system for detecting a fraudulent access to a web resource, the web resource being hosted by a server, the server comprising a processor configured to:

receive a first request to access the web resource by a first electronic device, the first request including a first cookie, the first cookie being a first encrypted cookie;

in response to receiving the first request, the processor being configured to determine a time of creation of the first encrypted cookie;

convert the first cookie into a second cookie, to convert, the processor being configured to re-encrypt the first encrypted cookie into a second encrypted cookie in response to the time of creation being indicative of an age of the first encrypted cookie being above a predetermined threshold;

transmit the second cookie to the first electronic device for storing;

receive a second request to access the web resource by a second electronic device, the second request including a third cookie, the third cookie being a third encrypted cookie; and

determine the second request to be a fraudulent request, the determining based on an analysis of the third cookie and the first cookie.

11. The system of claim 10 , wherein:

the first encrypted cookie includes a first user device ID associated with the first electronic device and a first time stamp indicative of a creation time of the first encrypted cookie:

the second encrypted cookie includes the first user device ID and a second time stamp indicative of the creation time of the second encrypted cookie;

the third encrypted cookie includes at least a second user device ID.

12. The system of claim 11 , wherein the server is coupled to a database, and the processor is further configured to: store an indication of the re-encryption of the first encrypted cookie to the second encrypted cookie within the database.

13. The system of claim 12 , wherein to determine the second request to be a fraudulent request, the processor is configured to:

access the database to determine the second user device ID to be the same as the first user device ID.

14. The system of claim 13 , wherein the first electronic device is different from the second electronic device.

15. The system of claim 13 , wherein the first electronic device is the second electronic device.

16. The system of claim 10 , wherein the processor is configured to store a first encryption key and a second encryption key, and wherein the processor is further configure to:

prior to receiving the first request, receive a third request by the first electronic device;

generate the first encrypted cookie with the first encryption key;

transmit the first encrypted cookie to the first electronic device for storage; and wherein:

to re-encrypt by the server, the processor is configured to:

decrypt the first encrypted cookie using the first encryption key;

re-encrypt the decrypted first encrypted cookie with the second encrypted key, the second encrypted cookie being different from the first encrypted cookie.