Secure dynamic page content and layouts apparatuses, methods and systems

• US 10,262,148 B2
• Filed: 05/19/2013
• Issued: 04/16/2019
• Est. Priority Date: 01/09/2012
• Status: Active Grant

• Current Assignee: Visa International Service Association (Visa, Inc.)
• Original Assignee: Visa International Service Association (Visa, Inc.)
• Inventors: Cote, Stephen W.
• Primary Examiner(s): Ell, Matthew
• Assistant Examiner(s): El Seoud, Mohamed Abou
• Application Number:
  US13/897,433
• Publication Number:
  US 20130263280A1
• Time in Patent Office: 2,158 Days
• Field of Search: 715745, 715243
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2203/04803 Split screen, i.e. subdividing the display area or the window area into separate subareas
• CPC Class Codes: G06F 2221/031 Protect user input by software means
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 3/017 Gesture based interaction, e.g. based on a set of recognized hand gestures interaction based on gestures traced on a digitiser G06F3/04883
• CPC Class Codes: G06F 3/0346 with detection of the device orientation or free movement in a 3D space, e.g. 3D mice, 6-DOF [six degrees of freedom] pointers using gyroscopes, accelerometers or tilt-sensors
• CPC Class Codes: G06F 3/04886 by partitioning the display area of the touch-screen or the surface of the digitising tablet into independently controllable areas, e.g. virtual keyboards or menus
• CPC Class Codes: G06F 8/38 for implementing user interfaces
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware

Abstract

The SECURE DYNAMIC PAGE CONTENT AND LAYOUTS APPARATUSES, METHODS AND SYSTEMS (“DPCL”) transform dynamic layout template requests, device, user, and surroundings security profiles, and layout usage monitor packages using DPCL components into customized secure dynamic layouts. In some implementations, the disclosure provides a processor-implemented method of transforming the content of an electronically generated user facing page for displaying on a user display.

Claims

1. A processor-implemented method of dynamically customizing an application user interface layout to enhance security, comprising:

receiving, by a processing system, a self actuated varying secure layout template request from a user mobile device, wherein the request includes a plurality of security assessment values provided by the user mobile device;

determining, by the processing system, an application security threat factor, a user location security threat factor, a user surroundings security threat factor, and a user device profile security threat factor using the plurality of security assessment values;

retrieving, by the processing system, a self actuated varying layout template from a layout template database, wherein the self actuated varying layout template has at least one user interface display view;

determining, by the processing system, a z-index security threat factor by executing a layer test to determine one or more user interface display view layers above or below the at least one user interface display view;

calculating, by the processing system, an overall security threat factor based on the application security threat factor, the user location security threat factor, the user surroundings security threat factor, the user device profile security threat factor, and the z-index security threat factor;

determining, by the processing system, a security maintenance factor for the at least one user interface display view, wherein the security maintenance factor is based on one or more characteristics of the at least one user interface display view that increases the ability of the at least one user interface display view to maintain security;

determining, by the processing system, an interface security threat factor based on the overall security threat factor and the security maintenance factor;

determining, by the processing system, whether to modify the at least one user interface display view by comparing the interface security threat factor to a predetermined interface security threat threshold;

modifying the at least one user interface display view based on the determination of whether to modify, wherein modifying includes

randomizing the location of content displayed on the user interface display view along the x axis and y axis; and

providing a modified self actuated varying secure layout template to the user mobile device.

2. The method of claim 1, wherein modifying the at least one user interface display view includes inserting a user specified security image into the user interface display view.

3. The method of claim 2, additionally comprising setting a user interface display view parameter to indicate that no further content or adjustments should be made to the user interface display view.

4. The method of claim 1, wherein the received a plurality of assessment values is not provided by the user mobile device.

5. The method of claim 4, wherein the plurality of assessment values is retrieved from a local security database.

6. The method of claim 1, wherein the plurality of assessment values includes information about applications that are installed on the user mobile device.

7. The method of claim 6, wherein the information about applications that are installed on the user mobile device additionally includes an indication of which applications are currently running on the user mobile device.

8. The method of claim 7, wherein the indication of which applications are currently running on the user mobile device includes a user interface z-index configuration listing.

9. The method of claim 1, wherein modifying the at least one user interface display view includes shifting the position of the interface display view so that the at least one interface display view is not under a non-authorized interface view overlay.

17. The method of claim 1, further comprising:

recalculating the interface security threat factor; and

comparing the recalculated interface security threat factor to the predetermined security threat threshold,

if the recalculated interface security threat factor is less than the predetermined interface security threat threshold,

setting a user interface display view parameter to indicate that the at least one interface display view as capable of holding secure content.

10. A processor-implemented system of dynamically customizing an application user interface layout to enhance security, comprising:

a processor; and

a memory disposed in communication with the processor and storing processor-issuable instructions to;

receive a self actuated varying secure layout template request from a user mobile device, wherein the request includes a plurality of security assessment values;

determine an application security threat factor, a user location security threat factor, a user surroundings security threat factor, and a user device profile security threat factor using the plurality of security assessment values;

retrieve a self actuated varying layout template from a layout template database, wherein the self actuated varying layout template has at least one user interface display view;

determine a z-index security threat factor by executing a layer test to determine one or more user interface display view layers above or below the at least one user interface display view;

calculate an overall security threat factor based on the application security threat factor, the user location security threat factor, the user surroundings security threat factor, the user device profile security threat factor, and the z-index security threat factor;

determine a security maintenance factor for the at least one user interface display view, wherein the security maintenance factor is based on one or more characteristics of the at least one user interface display view that increases the ability of the at least one user interface display view to maintain security;

determine an interface security threat factor based on the overall security threat factor and the security maintenance factor;

determine whether to modify the at least one user interface display view by comparing the interface security threat factor to a predetermined interface security threat threshold;

modify the at least one user interface display view based on the determination of whether to modify, wherein modify includes

randomize the location of content displayed on the user interface display view along the x axis and y axis; and

provide a modified self actuated varying secure layout template to the user mobile device.

11. The system of claim 10, wherein means to modify the at least one user interface display view includes means to resize the user interface display view.

12. The system of claim 10, wherein means to modify the at least one user interface display view includes means to insert a user specified security image into the user interface display view.

13. The system of claim 12, additionally comprising means to set a user interface display view parameter to indicate that no further content or adjustments should be made to the user interface display view.

14. The system of claim 10, wherein the received plurality of assessment values is not provided by the user mobile device.

15. The system of claim 14, wherein the plurality of assessment values is retrieved from a local security database.

16. A non-transitory medium storing security enhancing dynamically customizing application user interface layout instructions to:

receive a self actuated varying secure layout template request from a user mobile device, wherein the request includes a plurality of security assessment values;

determine an application security threat factor, a user location security threat factor, a user surroundings security threat factor, and a user device profile security threat factor using the plurality of security assessment values;

retrieve a self actuated varying layout template from a layout template database, wherein the self actuated varying layout template has at least one user interface display view;

determine a z-index security threat factor by executing a layer test to determine one or more user interface display view layers above or below the at least one user interface display view;

calculate an overall security threat factor based on the application security threat factor, the user location security threat factor, the user surroundings security threat factor the user device profile security threat factor, and the z-index security threat factor;

determine a security maintenance factor for the at least one user interface display view, and wherein the security maintenance factor is based on one or more characteristics of the at least one user interface display view that increases the ability of the at least one user interface display view to maintain security;

determine an interface security threat factor based on the overall security threat factor and the security maintenance factor;

determine whether to modify the at least one user interface display view by comparing the interface security threat factor to a predetermined interface security threat threshold;

modify the at least one user interface display view based on the determination of whether to modify, wherein modify includes

randomize the location of content displayed on the user interface display view along the x axis and y axis; and

provide a modified self actuated varying secure layout template to the user mobile device.