System and Method for Securing a Network Session

• US 20090037976A1
• Filed: 06/13/2008
• Published: 02/05/2009
• Est. Priority Date: 03/30/2006
• Status: Active Grant

• Current Assignee: Antlabs Pte Ltd.
• Original Assignee: Antlabs Pte Ltd.
• Inventors: Chung, Hyung Hwan, Toh, Teck Kang, Teo, Wee Tuck
• Granted Patent: US 9,112,897 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

A system comprises an end-user device including a browser and a security component capable of executing a security policy, the security policy to be downloaded from a website; and a website including a security policy downloadable to the security component.

Claims

1. A system comprising:

an end-user device including a browser and a security component capable of executing a security policy, the security policy to be downloaded from a website; and

a website including a security policy downloadable to the security component.

2. The system of claim 1, wherein the security component downloads the security policy from the website upon connection to the website.

3. The system of claim 1, wherein the security component activates a security mechanism upon detection of a trigger point.

4. The system of claim 3, wherein the trigger point includes an explicit trigger point.

5. The system of claim 4, wherein the explicit trigger point includes a metatag embedded in the website.

6. The system of claim 5, wherein the metatag is associated with a particular security mechanism.

7. The system of claim 4, wherein the trigger point includes an implicit trigger point.

8. The system of claim 7, wherein the implicit trigger point includes recognition of an event.

9. The system of claim 1, wherein the security component connects to the website via a point-to-point tunnel before downloading the security policy.

10. The system of claim 1, wherein the website includes an integrity checksum embedded in the website, and the security component includes a website integrity checker to use the integrity checksum to confirm that the website has not been modified during transport.

11. The system of claim 1, wherein the security policy identifies alias and affiliate servers where the browser may navigate without raising concern.

12. A method comprising:

using a browser to navigate to a website, the website including a downloadable security policy; and

using a security component to download the security policy from the website and to effect the security policy while navigating the website.

13. The method of claim 12, wherein the using the security component to download the security policy from the website occurs upon connection to the website.

14. The method of claim 12, further comprising activating a security mechanism upon detection of a trigger point,

15. The method of claim 14, wherein the trigger point includes an explicit trigger point.

16. The method of claim 15, wherein the explicit trigger point includes a metatag embedded in the website.

17. The method of claim 16, wherein the metatag is associated with a particular security mechanism.

18. The method of claim 15, wherein the trigger point includes an implicit trigger point.

19. The method of claim 18, wherein the implicit trigger point includes recognition of an event.

20. The method of claim 12, further comprising connecting to the website via a point-to-point tunnel before downloading the security policy.

21. The method of claim 12, wherein the website, includes an integrity checksum embedded in the website, and further comprising using the integrity checksum to confirm that the website has not been modified during transport.

22. The method of claim 12, wherein the security policy identifies alias and affiliate servers where the browser may navigate without raising concern.

23. A system comprising:

means for navigating to a website, the website including a downloadable security policy;

means for downloading the security policy from the website; and

means for effecting the security policy while navigating the website.