# US 2013/0254530 A1 · System and method for identifying security breach attempt of a website

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2013/0254530 A1
- Document ID: US20130254530A1
- Status: Published application
- Kind: A1
- Application number: 13/895,384
- Filed: 2013-05-16
- Published: 2013-09-26
- Earliest claimed: 2009-09-23
- Assignees: Versafe Ltd.
- Applicants: Versafe Ltd.
- Inventors: Idan AMIR; Eyal Gruner; Boaz Zilber
- Web page: https://patentgrep.com/patent/US20130254530A1

## CPC

- G06F 21/57: Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
- G06F 21/52: during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow}
- G06F 21/552: {involving long-term monitoring or reporting}
- H04L 63/1416: {Event detection, e.g. attack signature detection}
- H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms}
- H04L 63/1483: {service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12)}
- G06F 2221/2119: Authenticating web pages, e.g. with suspicious links
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The present invention is a method, circuit and system for detecting, reporting and preventing an attempted security breach of a commercial website (for example a banking website), such as identity theft, website duplication (mirroring/Phishing), MITB (man in the browser) attacks, MITM (man in the middle) attacks and so on.

## Claims

### Claim 1

A website security system for detecting security breach attempts associated with a man in the browser scheme, said system comprising: a code of a website; a software module, functionally associated with said code and adapted to encrypt user information, at the application level, using a changing public encryption key associated with said website; and a server adapted to provide a client computer with said code and said software module.

### Claim 2 (depends on 1)

The system according to claim 1, wherein said software module is further adapted to receive a public encryption key either upon being served to or upon instancement on a client browser.

### Claim 3 (depends on 1)

The system according to claim 1, wherein said software module is further adapted to create a public encryption key upon being served to a client browser.