US 12,500,935 B2 · Multi-layer browser-based context emulation detection

Abstract

Methods, systems and computer program products are provided for multi-layer, browser-based context emulation detection, which may be implemented by a proxy for browsers. A policy may be enforced against requests if a request context indicates a restricted context. Context may be detected and indicated in a response header and body based on one or more context detection/indication rules. Context may be indicated by marking or not marking resources indicated in responses. Code may be injected to cause the client web browser to indicate context. A response may be forwarded to the client with a response header context, a response body context, and/or injected code, which a client browser may process to generate a request with one or more indications of request context.

Claims20

Dependent claims

A computing device that includes a proxy server, the proxy server comprising:

a processor;
and
a memory device that stores program code structured to cause the processor to:
receive a request associated with a client web browser, the request comprising a request header and a request body;
receive a response associated with a web server, the response comprising a response header and a response body, the response header indicating a response header context and the response body indicating a response body context;
inspect the response header for the response header context;
inspect the response body for the response body context;
determine, based at least on context detection rules, whether to mark the response header to indicate the response header context;
determine, based at least on the context detection rules, whether to mark the response body to indicate the response body context;
and
forward to the client a response indicating at least one of the response header context or the response body context.

8 more elements

A computer-implemented method comprising:

receiving a request associated with a client web browser, the request comprising a request header and a request body;
receiving a response associated with a web server, the response comprising a response header and a response body, the response header indicating a response header context and the response body indicating a response body context;
inspecting the response header for the response header context;
inspecting the response body for the response body context;
determining based at least on context detection rules whether to:
mark the response header to indicate the response header context;
mark the response body to indicate the response body context;
or
inject code into the response, wherein the injected code is configured to cause the client web browser to mark the request with at least a portion of the request context;
and
forwarding to the client a response indicating at least one of the response header context, the response body context, or including the injected code.

8 more elements

A computer-readable storage medium having program instructions recorded thereon that, when executed by a processing circuit, perform a method comprising:

receiving a request associated with a client web browser, the request comprising a request header and a request body;
inspecting the request header for an indication of a request context;
enforcing a policy against the request in response to a determination the indication of the request context indicates a restricted context;
receiving a response associated with a web server, the response comprising a response header and a response body, the response header indicating a response header context and the response body indicating a response body context;
inspecting the response header for the response header context;
inspecting the response body for the response body context;
determining based at least on context detection rules to inject code into a forwarded response, wherein the injected code is configured to cause the client web browser to mark the request with at least a portion of the request context;
and
forwarding to the client a response indicating the injected code.

6 more elements

Dependencies are inferred from the claim text.

Multi-layer browser-based context emulation detection

Life of this patent

Multi-layer browser-based context emulation detection

Life of this patent

Abstract

Claims20