Preventing unwanted data leakage in data network traffic using cloaked redirects
AssigneeNeptuneAds LLC
InventorEnrique Andres Ferraro
Life of this patent
Estimating the term…
Abstract
A redirect cloaking system (RCS) is provided. The RCS receives, from a client computing device, an original request to access a resource from another computing device, and cloaks at least a portion of a redirect chain associated with servicing the original request such that at least a first portion of redirect responses of the redirect chain are not returned to the client computing device. The RCS returns at least one of a second portion of redirect responses of the redirect chain or the resource to the client computing device without exposing the first portion of redirect responses to the client computing device.
Claims20
A method, in a data processing system comprising at least one processor and at least one memory, the at least one memory comprising instructions which are executed by the at least one processor to cause the at least one processor to be specifically configured to implement a redirect cloaking system, the method comprising:
- receiving, by the redirect cloaking system from a client computing device, an original request to access a resource from another computing device;
- cloaking, by the redirect cloaking system, at least a portion of a redirect chain associated with servicing the original request such that at least a first portion of redirect responses of the redirect chain are not returned to the client computing device at least by:
- sending a request to a next computing system along the redirect chain targeted by the request;
- receiving a response from the next computing system;
- parsing and processing the response to determine whether the response is a redirect response;
- in response to the response from the next computing system being determined to be a redirect response, adding a generated request to a redirect stack, wherein the generated request targets a location specified in the redirect response;
- and
- in response to determining that the response is not a redirect response, returning an output to the client computing device wherein the output comprises a redirect to a location specified in an entry at the top of the redirect stack;
- and
- returning, by the redirect cloaking system, at least one of a second portion of redirect responses of the redirect chain or the resource to the client computing device without exposing the first portion of redirect responses to the client computing device.
A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed on a data processing system, causes the data processing system to be specifically configured to implement a redirect cloaking system that operates to:
- receive, from a client computing device, an original request to access a resource from another computing device;
- cloak at least a portion of a redirect chain associated with servicing the original request such that at least a first portion of redirect responses of the redirect chain are not returned to the client computing device at least by:
- sending a request to a next computing system along the redirect chain targeted by the request;
- receiving a response from the next computing system;
- parsing and processing the response to determine whether the response is a redirect response;
- in response to the response from the next computing system being determined to be a redirect response, adding a generated request to a redirect stack, wherein the generated request targets a location specified in the redirect response;
- and
- in response to determining that the response is not a redirect response, returning an output to the client computing device wherein the output comprises a redirect to a location specified in an entry at the top of the redirect stack;
- and
- return at least one of a second portion of redirect responses of the redirect chain or the resource to the client computing device without exposing the first portion of redirect responses to the client computing device.
An apparatus comprising:
- a processor;
- and
- a memory coupled to the processor, wherein the memory comprises instructions which, when executed by the processor, cause the processor to be specifically configured to implement a redirect cloaking system that operates to:
- receive, from a client computing device, an original request to access a resource from another computing device;
- cloak at least a portion of a redirect chain associated with servicing the original request such that at least a first portion of redirect responses of the redirect chain are not returned to the client computing device at least by:
- sending a request to a next computing system along the redirect chain targeted by the request;
- receiving a response from the next computing system;
- parsing and processing the response to determine whether the response is a redirect response;
- in response to the response from the next computing system being determined to be a redirect response, adding a generated request to a redirect stack, wherein the generated request targets a location specified in the redirect response;
- and
- in response to determining that the response is not a redirect response, returning an output to the client computing device wherein the output comprises a redirect to a location specified in an entry at the top of the redirect stack;
- and
- return at least one of a second portion of redirect responses of the redirect chain or the resource to the client computing device without exposing the first portion of redirect responses to the client computing device.
Dependencies are inferred from the claim text.