US 8,819,049 B1 · Frame injection blocking

Abstract

A parsing module identifies a framed page within a web page received from a network. The parsing module further identifies information regarding the frame such as the framed page's uniform resource locator. A lookup module accesses a memory module to determine if the identified information regarding the frame is included in a protection list stored in the memory module. A notification module notifies a client's user that the framing web page is fraudulent if the identified information regarding the frame is included in the protection list. Alternatively, the parsing module is adapted to identify a security tag within the framed page indicating that the framed page is not permitted to be displayed within a frame. If the framed page includes a security tag, the notification module notifies the client's user that the framing web page is fraudulent.

Claims20

Dependent claims

A method of protecting a user of a client computer from computer frauds, comprising:

determining that a web page includes a frame having a framed web page;
receiving the framed web page;
detecting that the framed web page includes a security tag indicating that the framed web page is not permitted to be framed;
and
responsive to detecting that the framed web page includes the security tag, notifying the user that the framed web page is impermissibly framed.

2 more elements

A system for protecting a user of a client computer from computer frauds, comprising:

a computer-readable storage medium having embodied thereon executable program code;
a parsing module residing on the computer-readable storage medium for identifying a framed page within a web page, wherein the parsing module is adapted to detect that the framed web page includes a security tag indicating that the framed web page is not permitted to be framed;
an analysis module residing on the computer-readable storage medium for determining that the framed page is not permitted to be framed responsive to the framed web page including the security tag;
and
a notification module residing on the computer-readable storage medium for notifying the user that the framed page is not permitted to be framed responsive to the determination that the framed web page is not permitted to be framed.

2 more elements

A computer program product having a computer-readable storage medium having embodied thereon program code for protecting a user of a client computer from computer frauds, the program code comprising:

a parsing module for identifying a framed page within a web page, wherein the parsing module is adapted to detect that the framed web page includes a security tag indicating that the framed web page is not permitted to be framed;
an analysis module for determining that the framed page is not permitted to be framed responsive to the framed page including the security tag;
and
a notification module for notifying the user that the framed page is not permitted to be framed responsive to the determination that the framed page is not permitted to be framed.

1 more element

Dependencies are inferred from the claim text.

Frame injection blocking

Life of this patent

Frame injection blocking

Life of this patent

Abstract

Claims20