Back to results
US 12,120,133 B1Granted
Request header anomaly detection
AssigneeUnited Services Automobile Association (USAA)
InventorDuane E. Weldon
Life of this patent
Estimating the term…
Abstract
A system and a method are disclosed for detecting an unacceptable HTTP requests by scanning the headers of the HTTP requests.
Claims15
A method for detecting suspicious clients seeking access to a website comprising:
- providing a web server supporting the website electronically connected to the Internet for responding to incoming HTTP requests for webpages of the website from clients attempting to access the website;
- receiving at the web server a plurality of incoming HTTP request headers from a browser of a client, the plurality of incoming HTTP request headers are in an order of appearance from top to bottom and include a USER_AGENT header and an ACCEPT_LANGUAGE header, the USER_AGENT header identifies the client browser type and the ACCEPT_LANGUAGE header identifies a q value, wherein the q value is unique to a browser type;
- comparing the browser type identified in the USER_AGENT header received from the browser of the client with the browser type associated with the q value identified in the ACCEPT LANGUAGE header received from the browser of the client;
- and
- denying, based on the comparison, the client access to the website.
2 more elements
A system for detecting suspicious clients seeking access to a website comprising:
- providing a server for receiving communications from a user over an electronic network, the server having a processor and a memory storing software instructions when executed by the processor performs the following steps:
- providing a web server supporting the website electronically connected to the Internet for responding to incoming HTTP requests for webpages of the website from clients attempting to access the website;
- receiving at the web server a plurality of incoming HTTP request headers from a browser of a client, the plurality of incoming HTTP request headers are in an order of appearance from top to bottom and include a USER_AGENT header and an ACCEPT_LANGUAGE header, the USER_AGENT header identifies the client browser type and the ACCEPT_LANGUAGE header identifies a q value, wherein the q value is unique to a browser type;
- comparing the browser type identified in the USER_AGENT header received from the browser of the client with the browser type associated with the q value identified in the ACCEPT LANGUAGE header received from the browser of the client;
- and
- denying, based on the comparison, the client access to the website.
3 more elements
A non-transitory machine-readable set of instructions stored on a medium for detecting suspicious clients seeking access to a website when executed by a processor perform the steps comprising:
- receiving at the website communications from a user over an electronic network;
- providing a web server supporting the website electronically connected to the Internet for responding to incoming HTTP requests for webpages of the website from clients attempting to access the website;
- receiving at the web server a plurality of incoming HTTP request headers from a browser of a client, the plurality of incoming HTTP request headers are in an order of appearance from top to bottom and include a USER_AGENT header and an ACCEPT_LANGUAGE header, the USER_AGENT header identifies the client browser type and the ACCEPT_LANGUAGE header identifies a q value, wherein the q value is unique to a browser type;
- comparing the browser type identified in the USER_AGENT header received from the browser of the client with the browser type associated with the q value identified in the ACCEPT LANGUAGE header received from the browser of the client;
- and
- denying, based on the comparison, the client access to the website.
3 more elements
Dependencies are inferred from the claim text.