System and method of using spatial and temporal signals to identify and prevent attacks

• US 10,349,202 B1
• Filed: 02/21/2018
• Issued: 07/09/2019
• Est. Priority Date: 08/07/2009
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Liang, Sam, Chu, Michael, Luo, Yuhua, Ji, Zhengrong, Yu, Yan
• Primary Examiner(s): Nguyen, Phuoc H
• Application Number:
  US15/901,225
• Time in Patent Office: 503 Days
• Field of Search: 709225, 709217
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services

Abstract

Systems and methods according to aspects of the invention verify requests for information over a network. Computing devices communicating over a network transmit numerous signals with various types of information including spatial information, temporal information, device-specific information, and transmission specific information. This information may be used to generate statistical records of valid request for information. Various combinations of these signals may be used to determine whether a request for information is a valid request based on the statistical records associated with the signals. Where a request for information has been verified, the system and method may provide the information. Where the request for information has not been verified, the system and method may deny the request for information. Thus the system and method may be used to prevent and block scraping and spamming attacks.

Claims

1. A method of determining the validity of a request for information over a network, the method comprising:

generating, by one or more processors, a list of valid combinations identifying valid combinations of device information, transmission information and temporal pattern information;

receiving, by the one or more processors, from a first device of the network, a request for information, the request including a device information, transmission information and temporal pattern information combination; and

determining, by the one or more processors, if the request for information is a valid request, where a valid request includes a device information, transmission information and temporal pattern information combination identified in the list of valid combinations.

2. The method of claim 1, wherein the device information identifies a mobile device.

3. The method of claim 1, wherein the device information identifies hardware associated with the first device.

4. The method of claim 1, wherein the transmission information identifies a carrier.

5. The method of claim 1, wherein the transmission information identifies a network type.

6. The method of claim 1, wherein the device information identifies software associated with the first device.

7. The method of claim 6, wherein the software is an operating system associated with the first device.

8. The method of claim 1, wherein the list of valid combinations further includes geographic location information, wherein the received request further includes information identifying a geographic location of the first device, and wherein a valid request further includes a geographic location, device information and transmission information identified in list of valid combinations.

9. The method of claim 8, wherein the information indicating the geographic location of the first device is an IP address associated with the first device.

10. The method of claim 8, wherein the information indicating the geographic location of the first device is an IP address associated with a proxy-server.

11. The method of claim 1, wherein the temporal pattern information includes queries per second.