IP Library › Granted Patent US 10,069,809
Granted Patent B2
US 10,069,809 · App. 15/392,187 · Granted Sep 4, 2018

System and method for secure transmission of web pages using encryption of their content

Inventors: Oleg V. Kupreev (Moscow, RU); Vladimir A. Kuskov (Moscow, RU); Alexey A. Samuleenkov (Moscow, RU)
Assignee: Λο KΛSPERSKY LΛB
H04L63/0471G06F17/30893G06F21/606H04L9/3247H04L63/0227H04L63/0281H04L63/0435H04L63/0442H04L63/0485H04L63/145H04L63/1441H04L67/02H04L63/02H04L63/04H04L63/0428H04L2209/76
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,069,809
App. No.
15/392,187
Granted
Sep 4, 2018
Kind
B2
Abstract

Disclosed are systems and method for secure transmission of web pages using encryption of their content. An exemplary method comprises: receiving from a remote server, by a processor of a proxy server, a web page requested by a user device; analyzing, by the processor, the received web page to select one or more elements of the web page for encryption based at least upon a list of web page elements predetermined by the proxy server to protect against malware attacks; encrypting the code of the one or more selected elements; generating a script containing the encrypted code of the one or more selected elements; and replacing the code of the one or more selected elements in the web page with the script containing the encrypted code of the one or more selected elements prior to transmitting the web page to the user device.

Claims (55)

1. A method for secure transmission of web page data, the method comprising:

receiving from a remote server, by a processor of a proxy server, a web page requested by a user device;

analyzing, by the processor, the received web page to select one or more elements of the web page for encryption based at least upon a list of web page elements predetermined by the proxy server to protect against malware attacks;

encrypting markup language code of the one or more selected elements, wherein the markup language code comprises HyperText Markup Language (HTML) code of the one or more selected elements of the web page;

generating a script containing the encrypted markup language code of the one or more selected elements; and

replacing the markup language code of the one or more selected elements in the web page with the script containing the encrypted markup language code of the one or more selected elements prior to transmitting the web page to the user device.

2. The method of claim 1 , further comprising determining the list of web page elements by the proxy server using data leak prevention (DLP) techniques.

3. The method of claim 1 , further comprising deleting from the web page codes of web page elements that have been encrypted while replacing the code of the one or more selected elements in the web page with the script containing the encrypted code of the one or more selected elements.

4. The method of claim 1 , wherein the script is configured to comprise a digital signature to prevent unauthorized modification of information being transmitted from the remote server by a third party.

5. A system for secure transmission of web page data, the system comprising:

a proxy server having a hardware processor configured to:

receive from a remote server a web page requested by a user device;

analyze the received web page to select one or more elements of the web page for encryption based at least upon a list of web page elements predetermined by the proxy server to protect against malware attacks;

encrypt markup language code of the one or more selected elements, wherein the markup language code comprises HyperText Markup Language (HTML) code of the one or more selected elements of the web page;

generate a script containing the encrypted markup language code of the one or more selected elements; and

replace the markup language code of the one or more selected elements in the web page with the script containing the encrypted markup language code of the one or more selected elements prior to transmitting the web page to the user device.

6. The system of claim 5 , wherein the processor is further configured to determine the list of web page elements using data leak prevention (DLP) techniques.

7. The system of claim 5 , wherein the processor is further configured to delete from the web page codes of web page elements that have been encrypted while replacing the code of the one or more selected elements in the web page with the script containing the encrypted code of the one or more selected elements.

8. The system of claim 5 , wherein the script is configured to comprise a digital signature to prevent unauthorized modification of information being transmitted from the remote server by a third party.

9. A non-transitory computer readable medium storing computer executable instructions for secure transmission of web page data, including instructions for:

receiving from a remote server, by a processor of a proxy server, a web page requested by a user device;

analyzing, by the processor, the received web page to select one or more elements of the web page for encryption based at least upon a list of web page elements predetermined by the proxy server to protect against malware attacks;

encrypting markup language code of the one or more selected elements, wherein the markup language code comprises HyperText Markup Language (HTML) code of the one or more selected elements of the web page;

generating a script containing the encrypted markup language code of the one or more selected elements; and

replacing the markup language code of the one or more selected elements in the web page with the script containing the encrypted markup language code of the one or more selected elements prior to transmitting the web page to the user device.

10. The non-transitory computer readable medium of claim 9 , further comprising instructions for deleting from the web page codes of web page elements that have been encrypted while replacing the code of the one or more selected elements in the web page with the script containing the encrypted code of the one or more selected elements.

11. A method for secure transmission of web page data, the method comprising:

directly receiving, by a user device, a web page including a script from a remote web server, the script comprising a public key of the remote web server;

executing the script, by a processor of the user device, to encrypt a request to receive the web page using the public key of the remote web server;

transmitting, by the user device, the encrypted request to the remote web server;

receiving, by the user device, a message from the remote web server, the message containing encrypted markup language code of one or more elements of the web page;

executing the script, by the hardware processor, to decrypt the encrypted markup language code of one or more elements of the web page using a private key of an application of the user device; and

adding the decrypted markup language code of the one or more elements into the web page prior to displaying the web page on the user device.

12. The method of claim 11 , wherein the message is encrypted with the public key.

13. The method of claim 11 , wherein the script is configured to comprise a digital signature to prevent unauthorized modification of information being transmitted from the remote server by a third party.

14. The method of claim 11 , wherein the encrypted code of one or more elements of the web page is encrypted using the public key.

15. A system for secure transmission of web page data, the system comprising:

a user device having a hardware processor configured to:

directly receive a web page including a script from a remote web server, the script comprising a public key of the remote web server;

execute the script to encrypt a request to receive the web page using the public key of the remote web server;

transmit the encrypted request to the remote web server;

receive a message from the remote web server, the message containing encrypted markup language code of one or more elements of the web page;

execute the script to decrypt the encrypted markup language code of one or more elements of the web page using a private key of an application of the user device; and

add the decrypted markup language code of the one or more elements into the web page prior to displaying the web page on the user device.

16. The system of claim 15 , wherein the message is encrypted with the public key.

17. The system of claim 15 , wherein the script is configured to comprise a digital signature to prevent unauthorized modification of information being transmitted from the remote server by a third party.

18. The system of claim 15 , wherein the encrypted code of one or more elements of the web page is encrypted using the public key.

19. A non-transitory computer readable medium storing computer executable instructions for secure transmission of web page data, including instructions for:

directly receiving, by a user device, a web page including a script from a remote web server, the script comprising a public key of the remote web server;

executing the script, by a processor of the user device, to encrypt a request to receive the web page using the public key of the remote web server;

transmitting, by the user device, the encrypted request to the remote web server;

receiving, by the user device, a message from the remote web server, the message containing encrypted markup language code of one or more elements of the web page;

executing the script, by the hardware processor, to decrypt the encrypted markup language code of one or more elements of the web page using a private key of an application of the user device; and

adding the decrypted markup language code of the one or more elements into the web page prior to displaying the web page on the user device.

20. The non-transitory computer readable medium of claim 19 , wherein the message is encrypted with the public key.

Continuity (2)
Continuation 14936932 · Nov 10, 2015
Related Publication 20170134347A1 · May 11, 2017