# US 11,122,072 B2 · Enhanced browsing with security scanning > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,072 B2 - Document ID: US11122072B2 - Status: Granted - Kind: B2 - Application number: 16/532,099 - Filed: 2019-08-05 - Published: 2019-11-28 - Granted: 2021-09-14 - Earliest claimed: 2004-09-27 - Assignees: Cufer Asset Ltd. L.L.C. - Applicants: Cufer Asset Ltd. L.L.C. - Inventors: Scott Milener; Wendell Brown; James Kelly - Web page: https://patentgrep.com/patent/US11122072B2 ## CPC - H04L 63/1433: {Vulnerability analysis} - G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability - G06F 21/566: {Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities} - H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)} - H04L 63/1416: {Event detection, e.g. attack signature detection} - H04L 63/1425: {Traffic logging, e.g. anomaly detection} - H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms} - H04L 67/5681: Pre-fetching or pre-delivering data based on network characteristics - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method securely scans a second web page linked to a first web page being displayed by a browser. The method identifies a target link to a second web page from one or more links contained within a first web page. Prior to receiving a user selection of the target link, the method prefetches content from the second web page and loads the prefetched content from the second web page into a safe cache before receiving the user selection of the target link. The method scans the prefetched content from the second web page for a security threat, within the safe cache, wherein the safe cache is configured to prevent the prefetched content from altering a memory location or storage location external to the safe cache. In response to identifying a security threat within the prefetched content, the method displays a warning to the user. ## Claims ### Claim 1 A method of secure scanning of a second web page linked to a first web page being displayed by a browser in a browser window, the method comprising: identifying a target link to the second web page from one or more links that are contained within the first web page; prior to receiving a user selection of the target link, prefetching content from the second web page; loading the prefetched content from the second web page into a safe cache before receiving the user selection of the target link; scanning the prefetched content from the second web page for a security threat, within the safe cache, wherein the safe cache is configured to prevent the prefetched content from altering a memory location or storage location external to the safe cache; and notifying a central server of a result of the scanning of the prefetched content for a security threat. ### Claim 2 (depends on 1) The method of claim 1, further comprising in response to identifying a security threat within the prefetched content: displaying a warning to the user; presenting an option to ignore the warning; and in response to the user selecting the option to ignore the warning, causing display of a second window comprising the prefetched content. ### Claim 3 (depends on 2) The method of claim 2, further comprising in response to identifying no security threat within the prefetched content or in response to the user selecting an option to ignore the warning, causing display of a second window comprising the prefetched content. ### Claim 4 (depends on 3) The method of claim 3, further comprising prior to causing the display of the second window: generating but not displaying the second window; populating the second window with the prefetched content; and caching the second window. ### Claim 5 (depends on 3) The method of claim 3, wherein the second window is an enhanced browsing window lacking one or more functions provided by the browser window. ### Claim 6 (depends on 3) The method of claim 3, wherein the second window is configured to close in response to movement of a cursor out of the second window. ### Claim 7 (depends on 1) The method of claim 1, wherein the prefetched content contains executable code and said scanning comprises executing the code within the safe cache to determine a behavior of the executable code. ### Claim 8 (depends on 1) The method of claim 1, further comprising: prior to said scanning, querying the central server for a result of a previous scanning of the prefetched content. ### Claim 9 (depends on 1) The method of claim 1, wherein the security threat comprises one or more of a virus, a worm, or a trojan horse. ### Claim 10 (depends on 1) The method of claim 1, wherein the security threat comprises one or more of spyware or adware. ### Claim 11 (depends on 1) The method of claim 1, wherein the security threat comprises one or more of a phishing attack, a cookie, or a script. ### Claim 12 A non-transitory computer-readable storage medium storing instructions thereon that, if executed by a computing device, cause the computing device to perform operations of enhanced browsing with security scanning, the instructions comprising: instructions to identify a target link to a second web page from one or more links that are displayed within a first web page; instructions to prefetch content from the second web page prior to receiving a user selection of the target link; instructions to load the prefetched content into a safe cache on the computing device before receiving the user selection of the target link; instructions to scan the prefetched content for a security threat, within the safe cache, wherein the safe cache is configured to prevent the prefetched content from altering a memory location or storage location external to the safe cache; and instructions to notify a central server of a result of the scanning of the prefetched content for a security threat. ### Claim 13 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein the instructions further comprise: instructions to generate but not display a second window; instructions to populate the second window with the prefetched content; and instructions to cache the second window. ### Claim 14 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein the prefetched content contains executable code and said scanning comprises executing the code within the safe cache to determine a behavior of the executable code. ### Claim 15 (depends on 12) The non-transitory computer-readable storage medium of claim 12, wherein the instructions further comprise instructions to query the central server for a result of a previous scanning of the prefetched content. ### Claim 16 A method of enhanced browsing with security scanning, the method comprising: identifying a target link to content from one or more links that are contained within a first document; prior to receiving a user selection of the target link, prefetching the content; loading the content into a safe cache before receiving a user selection of the target link; while the content is in the safe cache, preventing the content from altering a memory location or storage location external to the safe cache and scanning the content to identify a presence or absence of a security threat; and notifying a central server of a result of the scanning of the content for a security threat. ### Claim 17 (depends on 16) The method of claim 16, further comprising: before receiving the user selection of the target link, altering an appearance of an indicator to indicate whether a security threat was detected within the content. ### Claim 18 (depends on 16) The method of claim 16, wherein the content contains executable code and said scanning comprises executing the code within the safe cache to determine a behavior of the code. ### Claim 19 (depends on 16) The method of claim 16, further comprising: querying the central server for a result of a previous scanning of the prefetched content. ### Claim 20 (depends on 16) The method of claim 16, further comprising in response to identifying a security threat within the prefetched content: displaying a warning to the user; presenting an option to ignore the warning; and in response to the user selecting the option to ignore the warning, causing display of a second window comprising the prefetched content.