# US 12,182,253 B2 · Method for providing service for security of web-browser-based content

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,182,253 B2
- Document ID: US12182253B2
- Status: Granted
- Kind: B2
- Application number: 17/792,393
- Filed: 2020-10-28
- Published: 2024-05-30
- Granted: 2024-12-31
- Earliest claimed: 2020-10-15
- Assignees: Drm Inside Co., Ltd.
- Applicants: Drm Inside Co., Ltd.
- Inventors: Tae Hyun Kim; Heonseob Lee
- Web page: https://patentgrep.com/patent/US12182253B2

## CPC

- G06F 21/1064: {Restricting content processing at operating system level}
- G06F 21/45: Structures or tools for the administration of authentication
- G06F 21/14: against software analysis or reverse engineering, e.g. by obfuscation
- G06F 21/30: Authentication, i.e. establishing the identity or authorisation of security principals
- G06F 21/44: Program or device authentication
- G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L 9/3239: {involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)}
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L 2463/103: applying security measure for protecting copyright
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The present disclosure relates to a method for providing a service for security of a web-browser-based content which increases security of an original content by inserting garbage characters into a text constituting an HTML-based original content, which can be opened through a web browser, to secure the original content, and by enabling only authenticated functions to be executed when calling functions for removing the garbage characters and performing functions related to the original content. The present disclosure, without installing a specific program linked to the web browser, can easily prevent a user who does not have the right to open an original content on a web browser from abnormally accessing the original content by constructing a certain function which is not authenticated. Thereby a copyrighted product infringement for a web browser-based original content can be prevented.

## Claims

### Claim 1

A method for providing a service for security of a web-browser-based content of a service providing system that distributes an HTML-based original content to a web browser of a user terminal, the service providing method comprising:
a character setting step of creating and storing one or more garbage character based on a plurality of original characters constituting an original content;
a content processing step of creating a security content obfuscating the original content by inserting one or more garbage characters, which are randomly selected from a plurality of pre-stored garbage characters, into the original content;
a security processing step of creating a security module that calls one or more functions for restoring the security content into the original content of APIs provided by a web browser, of creating, encoding, and inserting credential information, in which hash information and a function name for each of one or more callers included in a custom module are matched and included through the security module when creating the custom module including the one or more callers that call the API-based system function, in order to perform one or more functions related to the original content, and of inserting the security module and the custom module into the security content; and
a distributing step of creating function recognition information for a caller that is not a caller defined in advance in the security module of callers that call the system function on the web browser by hooking an API of the web browser, and then of setting the security module into a distribution mode and then transmitting the security content to the web browser in order to operate the security module such that a caller corresponding to the function recognition information is allowed to call a system function when credential information coinciding with the function recognition information exists in the custom module.

### Claim 2 (depends on 1)

The service providing method of claim 1, wherein a function that is called by the security module is included in a DOM property.

### Claim 3 (depends on 1)

The service providing method of claim 1, wherein the security module and the custom module are modules created based on JavaScript.

### Claim 4 (depends on 1)

The service providing method of claim 1, further comprising a step of creating hash information through a hash algorithm set in the security module for each of one or more callers included in the custom module by setting the security module into a development module in a process of creating the custom module, of creating credential information including the created hash information and a function name of each of one or more callers included in the custom module, and then of encoding and inserting the credential information into the custom module,
wherein the distributing step further includes a step of setting a security module of a security content corresponding to a request information for the distribution request into the distribution mode rather than the development mode when receiving the request information from the web browser of the user terminal.

### Claim 5 (depends on 1)

The service providing method of claim 1, wherein the security module set in the distribution mode is in accordance with execution of a security content of the web browser; recognizes a caller that calls a system function on the web browser; creates hash information by applying caller information including text information about a function of the recognized caller to a hash algorithm of the security module and then creates the function recognition information including a function name and hash information corresponding to the recognized caller when the recognized caller is not a caller defined in advance in a security module; decodes one or more items of credential information included in the custom module and then compares the credential information with the function recognition information based on a function name and hash information; prevents the recognized caller corresponding to the function recognition information from calling a system function when credential information coinciding with the function recognition information does not exist in the custom module; and allows the recognized caller to call a system function such that the called system function is executed when credential information coinciding with the function recognition information exists in the custom module.

### Claim 6 (depends on 1)

The service providing method of claim 1, wherein the content processing step creates a plurality of unit characters by dividing a plurality of original characters included in the original content in the unit of word or the unit of character, sets an original security tag for each of the plurality of original unit characters, and creates a security content obfuscating the original content by inserting one or more garbage characters, which are randomly selected from a plurality of pre-stored garbage characters, and a garbage security tag for discrimination from the original security tag every between the plurality of original security tags.

### Claim 7 (depends on 6)

The service providing method of claim 6, wherein the content processing step further includes a step of creating restoration information for recognize the original security tag and the garbage security tag, adding any one of the original security tag and the garbage security tag to the restoration information every time the any one is set, and putting the restoration information into the security content.

### Claim 8 (depends on 7)

The service providing method of claim 7, wherein the content processing step further includes a step of encoding the restoration information using a preset encryption key and of putting the encoded restoration information into the security content.

### Claim 9 (depends on 8)

The service providing method of claim 8, wherein one or more functions that are called by the security module decodes the restoration information using a preset decryption key, recognize the garbage security tag included in the security content based on the decoded restoration information, recognizes the garbage character on the basis of the garbage security tag recognized from the security content in accordance with the decoded restoration information, and converts a font size of the garbage character into 0.

### Claim 10 (depends on 9)

The service providing method of claim 9, wherein the content processing step further includes a step of encoding and inserting security option information, which includes at least one of first option information allowing the original content only at a specific URL, a second option information about whether to activate a print function when opening the original content, third option information about whether to activate a click when opening the original content, fourth option information about whether to active a print screen function when opening the original content, and fifth option information about whether to insert watermarking when opening the original content, into the security content,
wherein one or more functions that are called by the security module decodes the encoded security option information using the decryption key and then sets an environment property of the web browser on the basis of the security option information.