Executable code validation in a web browser
AssigneeMicrosoft Corporation
InventorsDavid B. Cross, Kira Radinsky
Life of this patent
Estimating the term…
Abstract
An active filter monitors a web browser session to identify executable code transmitted in the session. The executable code may be analyzed to determine if the code is digitally signed. When the code is digitally signed by the web server or by another trusted source, the code may be executed. When the code is neither digitally signed or when the source is not trusted, the code may be rejected and not executed. The filter may be implemented as a web browser component or plugin, as well as a gateway device, proxy, or other service. The filter may also be implemented on the server side to reject incoming data that may include unauthenticated code.
Claims20
A method performed on a computer processor, said method comprising:
- detecting a web browser session between a client and a web server;
- monitoring said web browser session to identify first data passed from said web server to said client;
- analyzing said first data to identify a first executable code within said first data;
- identifying a first digital signature for said first executable code;
- verifying said first digital signature for said first executable code;
- and
- permitting said first executable code to be executed based on said verifying.
A system comprising:
- a network connection;
- a session monitor that:
- detects a web browser session between a client and a web server;
- monitors said web browser session to identify a first data passed from said web server to said client;
- and
- analyzes said first data to identify a first executable code in said first data;
- a verifier that:
- identifies a digital signature for said first executable code;
- verifies said digital signature;
- and
- permits said first executable code to be transmitted to said client.
A web server comprising:
- a processor;
- a network connection;
- a web service that:
- receives requests for web pages from a client;
- and
- responds with a web page;
- a monitor that:
- monitors a session between said web server and said client;
- detects a first data passed from said client to said web server;
- and
- analyzes said first data to identify a first executable code in said first data;
- a verifier that:
- identifies a digital signature for said first executable code;
- verifies said digital signature;
- and
- permits said first data to be received by said web service based on said verifies.
Dependencies are inferred from the claim text.