Displaying a security element to help detect spoofing

• US 20060277605A1
• Filed: 06/02/2005
• Published: 12/07/2006
• Est. Priority Date: 06/02/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Curtis, Diane L., Seraji, Seana, Filner, Aaron, Cherian, Vinoo, Ramig, Randal J.
• Granted Patent: US 8,225,403 B2
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

A security element is displayed that provides information to a user to help ensure that they are not confused or misled into believing that content originates from a trusted source when in fact it does not. The security element shows the user the source of the content and is displayed in such a manner that the source of the content is easily viewable. For example, according to one embodiment, the security element is shown within the title bar of a window. The security element may also be temporarily shown. Providing the user with more information about the site being accessed helps them to make an intelligent decision about their browsing experience. The security element includes at least part of a domain name that identifies the source of the content. The security element may also include the entire domain name. For example, the security element may overlay the screen.

Claims

1. A computer-implemented method for providing information to a user to help prevent spoofing, comprising:

displaying content in a small screen;

determining a domain name that is associated with the content;

creating a security element that includes at least a portion of the domain name, and

displaying the security element within the small screen.

2. The method of claim 1, wherein the security element is displayed within a title bar.

3. The method of claim 1, wherein the security element is displayed over a portion of the content.

4. The method of claim 1, further comprising temporarily displaying the security element within the small screen.

5. The method of claim 1, wherein displaying the content within the small screen comprises displaying content within a screen having a resolution of less than or equal to 640×

480.

6. The method of claim 1, wherein creating the security element that includes at least a portion of the domain name, comprises truncating the domain name.

7. The method of claim 6, wherein truncating the domain name comprises removing characters from the beginning part of the domain name.

8. The method of claim 1, further comprising determining when the domain changes and in response to the domain changing, updating the security element to reflect the domain change.

9. A computer-readable medium having computer executable instructions for providing information to a user to help prevent spoofing, the instructions comprising:

displaying content in a small screen, wherein the content is associated with a domain;

creating a security element that indicates a source of the content, and

displaying the security element within the small screen.

10. The computer-readable medium of claim 9, wherein the security element is displayed within a title bar.

11. The computer-readable medium of claim 9, wherein the security element is displayed over a portion of the content.

12. The computer-readable medium of claim 9, further comprising temporarily displaying the security element within the small screen.

13. The computer-readable medium of claim 9, wherein displaying content within the small screen comprises displaying content within a screen having a diagonal size of less than four inches.

14. The computer-readable medium of claim 9, wherein creating the security element that indicates the source of the content comprises including at least a portion of the domain name identifying the domain.

15. The computer-readable medium of claim 14, further comprising truncating the domain name.

16. An apparatus, comprising:

a processor and a computer-readable medium;

an operating environment stored on the computer-readable medium and executing on the processor;

a small display; and

an application operating under the control of the operating environment and operative to perform actions, including;

displaying content in the small display;

creating a security element that indicates a source of the content, and

displaying the security element within the small display.

17. The apparatus of claim 16, wherein the security element is displayed within a title bar.

18. The apparatus of claim 16, wherein displaying the security element within the small display further comprises displaying the security element within the small screen for a predetermined period of time.

19. The apparatus of claim 16, wherein creating the security element that indicates the source of the content comprises including at least a portion of the domain name identifying a domain that is the source of the content.

20. The apparatus of claim 16, further comprising truncating a portion of the domain name.