Network browser configuration

• US 10,341,345 B1
• Filed: 12/15/2015
• Issued: 07/02/2019
• Est. Priority Date: 12/15/2015
• Status: Active Grant

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Johansson, Jesper Mikael, Hill, Peter Frank
• Primary Examiner(s): Steinle, Andrew J
• Application Number:
  US14/970,410
• Time in Patent Office: 1,295 Days
• Field of Search: None
• CPC Class Codes: G06F 21/445 by mutual authentication, e.g. between devices or programs
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/0884 by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Systems, methods, and computer-readable media related to configuration of browser applications executed on client computing device to control the functionality of the browser application as at least some content is accessed. The configuration of the browser application can be controlled programmatically such that the browser configuration can be validated and controlled by at least some content providers. Additionally, the configuration and subsequent processing of content provided by an authenticating content provider can be implemented in a manner such that users of a client computing device and other applications on the client computing device may not have access to modify or otherwise interfere with the operation of the browser software application.

Claims

1. A computer-implemented method for managing content comprising:

receiving, at a trusted proxy server, a content request from a client computing device executing a programmatically configured browser application, wherein the trusted proxy server is configured to receive and respond to browser and proxy verification requests from an authenticating content server and wherein the content request corresponding to content served by the authenticating content server;

transmitting, by the trusted proxy server, a browser verification request to the client computing device;

receiving, by the trusted proxy server, information responsive to the browser verification request, the information responsive to the browser verification request including a verifiable representation of a browser application state associated with the programmatically configured browser application of the client computing device;

determining, by the trusted proxy server, based at least in part on the content request, a programmatic configuration of the programmatically configured browser application;

determining, by the trusted proxy server, based at least in part on a processing of the verifiable representation of the browser application state, that the programmatically configured browser application is operable to implement the programmatic configuration;

transmitting, by the trusted proxy server, the content request to the authenticating content server;

receiving, by the trusted proxy server, content responsive to the content request from the authenticating content server;

transmitting, by the trusted proxy server, data communications to the programmatically configured browsing application, the data communications causing an activation of the programmatic configuration; and

transmitting, by the trusted proxy server, the content responsive to the content request.

2. The computer-implemented method of claim 1, wherein the programmatic configuration limits functionality of the programmatically configured browser application.

3. The computer-implemented method of claim 2, wherein the verifiable representation includes at least one of a public key, a hash of executable code, and a challenge-response.

4. The computer-implemented method of claim 1 further comprising:

receiving, at the trusted proxy server, a proxy verification request from the authenticating content server;

obtaining, by the trusted proxy server, information responsive to the proxy verification request, the information responsive to the proxy verification request including a verifiable representation of a proxy server state; and

transmitting, by the trusted proxy server, information responsive to the proxy verification request to the authenticating content server.

5. The computer-implemented method of claim 4, wherein the information responsive to the proxy verification request further includes at least a portion of the information responsive to the browser verification request.

6. A system comprising:

a first processor and a first memory for executing first computer executable instructions, the first computer executable instructions implementing a trusted proxy server, wherein the trusted proxy server is configured to receive and respond to browser and proxy verification requests from an authenticating content server, that is operable to at least;

receive, from a client computing device executing a programmatically configured browser application, a request for content corresponding to content served by the authenticating content server;

cause transmission of a browser verification request to the client computing device, the browser verification request independent of the request for content;

receive, from the client computing device, information responsive to the browser verification request, the information responsive to the browser verification request including an identifier of a programmatic configuration of the programmatically configured browser application;

based on a processing of the information responsive to the browser verification request, cause transmission of data communications to the client computing device, the data communications causing an activation of the programmatic configuration; and

cause transmission of the request for content.

7. The system of claim 6, wherein the trusted proxy server causes transmission of the browser verification request via at least one of a different communication port and a different communication protocol than the request for content.

8. The system of claim 6, wherein the information responsive to the browser verification request includes at least one additional information corresponding to the programmatically configured browser application.

9. The system of claim 8, wherein the at least one additional information corresponds to at least one of a user identifier or network identification information.

10. The system of claim 6, wherein the trusted proxy server causes transmission of the request for content to a network server executing a network-based programmatically configured browser application.

11. The system of claim 6, wherein the trusted proxy server causes transmission of the request for content to the authenticating content server.

12. The system of claim 11, wherein the trusted proxy server is verified based at least in part on a source address of the transmission of the request for content.

13. The system of claim 11, wherein the trusted proxy server is further operable to:

receive, from the authenticating content server, a proxy verification request;

obtain information responsive to the proxy verification request, the information responsive to the proxy verification request including at least an identifier of a trusted proxy server configuration;

cause transmission of the information responsive to the proxy verification request to the authenticating content server; and

receive, from the authenticating content server, content responsive to the request for content.

14. The system of claim 13, wherein the information responsive to the proxy verification request further includes at least a portion of the information responsive to the browser verification request.

15. The system of claim 13, wherein the trusted proxy server is preconfigured with a trusted proxy server configuration, and wherein the information responsive to the proxy verification request comprises information verifying that the trusted proxy server configuration has not been modified.

16. A method comprising:

receiving, by a trusted proxy server, wherein the trusted proxy server is configured to receive and respond to browser and proxy verification requests from an authenticating content server, a request for content from a client computing device executing a programmatically configured browser application, the request for content corresponding to content served by the authenticating content server;

transmitting, by the trusted proxy server, a browser verification request to the client computing device, the browser verification request independent of the request for content;

receiving, by the trusted proxy server, from the client computing device, information responsive to the browser verification request, the information responsive to the browser verification request including an identifier of a programmatic configuration of the programmatically configured browser application;

based on a processing of the information responsive to the browser verification request, transmitting, by the trusted proxy server, data communications to the client computing device, the data communications causing an activation of the programmatic configuration; and

transmitting, by the trusted proxy server, the request for content.

17. The method of claim 16, wherein the information responsive to the browser verification request includes at least one additional information corresponding to the programmatically configured browser application.

18. The method of claim 17, wherein the at least one additional information corresponds to at least one of a user identifier or network identification information.

19. The method of claim 16, wherein transmitting the request for content includes transmitting a request for content to at least one of a network server executing a network-based programmatically configured browser application or authenticating content server.

20. The method of claim 16 further comprising:

receiving, from an authenticating content server, a proxy verification request;

receiving information responsive to the proxy verification request, the information responsive to the proxy verification request including at least an identifier of a trusted proxy server configuration;

transmitting the information responsive to the proxy verification request to the authenticating content server; and

receiving, from the authenticating content server, content responsive to the request for content.

21. The method of claim 20, wherein the information responsive to the proxy verification request further includes at least a portion of the information responsive to the browser verification request.

22. The method of claim 20, wherein the information responsive to the proxy verification request comprises information verifying that a trusted proxy server configuration has not been modified.