System and method for secure HTML links

• US 20050182928A1
• Filed: 02/12/2004
• Published: 08/18/2005
• Est. Priority Date: 02/12/2004
• Status: Abandoned Application

• Current Assignee: Dell Products LP (Dell Technologies Inc.)
• Original Assignee: Dell Products LP (Dell Technologies Inc.)
• Inventors: DeSouza, Fabiano, Tjiong, Ching-Lung, Kamalanathan, Chandar, Tolliver, Reva
• Application Number:
  US10/777,600
• Publication Number:
  US 20050182928A1
• Time in Patent Office: Days
• US Class Current: 713/164
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow

Abstract

HTML links published in an HTML framework, such as a web page, select execution of restricted functions requiring a distinct user confirmation. Encrypted protocols associate with the HTML links are decrypted by a web browser retrieving the HTML framework for execution of the restricted function without the distinct user confirmation. For instance, binaries and scripts that are restricted from running upon selection through a browser until a distinct user confirmation is made instead execute automatically with selection of the HTML link upon validation of the associated decrypted protocol. Encrypted protocols are created by content author with a private key for security and are decrypted with a public key at an information handling system that retrieves the content to validate the content and execute restricted functions without further user permission.

Claims

1. A system for secure HTML links, the system comprising:

a protocol encryption tool operable to associate encrypted protocols with HTML links, each protocol associated with a restricted browser function;

an editor operable to publish an HTML link and associated encrypted protocol in a web page;

a browser operable to display the web page and HTML link, the browser having one or more restricted functions, each restricted function requiring at least selection of an HTML link and a function confirmation before the browser executes the function; and

a protocol decryption engine interfaced with the browser, the protocol decryption engine operable to decrypt the encrypted protocol associated with the HTML link and authorize execution of the associated restricted browser function without the function confirmation.

2. The system of claim 1 wherein the restricted browser function comprises a command to execute a binary.

3. The system of claim 1 wherein the restricted browser function comprises a command to save a binary.

4. The system of claim 1 wherein the restricted browser function comprises a command to execute a script.

5. The system of claim 1 wherein the restricted browser function comprises a command to save a script.

6. The system of claim 1 further comprising a protocol filter associated with the browser and operable to preprocess plural encrypted protocols upon retrieval of the web page by the browser.

7. The system of claim 1 wherein the protocol encryption tool comprises a private key for encryption of protocols.

8. The system of claim 7 wherein the protocol decryption engine comprises a public key.

9. A method for secure HTML links, the method comprising:

encrypting a protocol associated with a restricted browser function;

publishing the encrypted protocol in an HTML framework to associate with an HTML link that executes the restricted browser function;

displaying the HTML framework through a browser, the browser restricting execution of restricted functions by requiring a distinct confirmation before execution of the restricted function;

decrypting the encrypted protocol at the browser; and

authorizing execution of the restricted function without the distinct confirmation.

10. The method of claim 9 wherein encrypting a protocol further comprises encrypting the protocol with a private key.

11. The method of claim 10 wherein decrypting the protocol further comprises decrypting the protocol with a public key.

12. The method of claim 11 wherein authorizing execution of the restricted function further comprises authorizing execution of a binary by the browser.

13. The method of claim 11 wherein authorizing execution of the restricted function further comprises authorizing saving of a binary by the browser.

14. The method of claim 11 wherein authorizing execution of the restricted function further comprises authorizing execution of a script by the browser.

15. The method of claim 11 wherein authorizing execution of the restricted function further comprises authorizing saving of a script by the browser.

16. The method of claim 11 further comprising preprocessing of plural encrypted protocols substantially upon loading of the HTML framework to the browser.

17. The method of claim 11 wherein the distinct confirmation comprises a window displayed upon user selection of an HTML link associated with a restricted function, the window requiring at least one addition input by the user before execution of the restricted function.

18. An information handling system comprising:

a browser operable to retrieve and display a HTML link associated with a restricted function, the browser requiring a distinct confirmation of a selection of the HTML link before execution of the restricted function;

an encrypted protocol associated with the HTML link;

a protocol decryption engine interfaced with the browser and operable to override the distinct confirmation requirement upon decryption and validation of the encrypted protocol.

19. The information handling system of claim 18 wherein the browser is further operable to retrieve a web page having plural encrypted protocols, the information handling system further comprising a protocol filter interfaced with the browser and operable to identify the plural encrypted protocols for decrypting by the protocol decryption engine.

20. The information handling system of claim 19 further comprising a protocol database interfaced with the protocol decryption engine and having a table of protocols and associated restricted functions.