Protection of web pages using digital signatures
AssigneeMicrosoft Corporation
InventorMikhail Arkhipov
Life of this patent
Estimating the term…
Abstract
A web page is published with a digital signature. The web server verifies the digital signature at runtime before sending the page over a network to a client. If the signature does not match to the document content (e.g., the decrypted document content that had been previously encoded during the signing process does not match the original never encoded clear document content), the server stops serving the page and provides an indication, such as notifying the system administrator and/or the client. The client browser also can check the signature when it gets the page. The client browser can refuse to render the page and warn the user if the digital signature does not match to the document content.
Claims38
In a computer system, a method of publishing web page content, comprising:
- receiving original web page content;
- digitally signing the original web page content;
- and
- storing the digitally signed web page content in a storage device.
In a computer system, a method of authenticating web page content, comprising:
- receiving web page content comprising a digital signature;
- analyzing the digital signature to generate a result;
- and
- determining the authenticity of the web page content based on the result of analyzing the digital signature.
A computer-readable medium having stored thereon computer executable instructions for performing a method of publishing web page content, the method comprising:
- receiving original web page content;
- digitally signing the original web page content;
- and
- storing the digitally signed web page content in a storage device.
A computer-readable medium having stored thereon computer executable instructions for performing a method of authenticating web page content, comprising:
- receiving web page content comprising a digital signature;
- analyzing the digital signature to generate a result;
- and
- determining the authenticity of the web page content based on the result of analyzing the digital signature.
A system for securing web page content, comprising:
- a module that receives web page content;
- a processor that digitally signs the web page content;
- and
- a storage device that stores the digitally signed web page content.
A system for securing web page content, comprising:
- a module that receives digitally signed web page content;
- a processor that authenticates the digitally signed web page content and decrypts the digitally signed web page content;
- and
- a display device that displays the decrypted web page content if the digitally signed web page content is authentic.
Dependencies are inferred from the claim text.