GENERIC PREVENTATIVE USER INTERFACE CONTROLS

• US 20100250779A1
• Filed: 03/29/2010
• Published: 09/30/2010
• Est. Priority Date: 03/27/2009
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Adourian, Mike, Wihardjo, Fei, B'Far, Reza, Chitullapally, Sreedhar, Goh, Logan, Chakrabarti, Malini, Boucher, Lloyd
• Granted Patent: US 8,312,171 B2
• Time in Patent Office: Days
• US Class Current: 709/246
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Techniques for enforcing policies. A user requests content from an application and content is retrieved from the application. A determination is made whether any policies apply to the content. A script adapted to modify processing of the content according to any applicable policies is injected into a response to the user. The script may be dynamically generated, pulled from a cache or other data store, or a combination thereof.

Claims

1. A computer-implemented method of enforcing policies, comprising:

storing policies in a data store;

receiving content that is responsive to a request for information from a client;

identifying, based at least in part on the content, one or more of the policies applicable to the content;

determining, based at least in part on the identified one or more policies, executable instructions that are configured to cause the client to process the content according to the identified one or more policies;

modifying the content to include the executable instructions; and

providing the content for processing by the client.

2. The computer-implemented method of claim 1, wherein the content is a markup document and wherein the executable instructions are a script.

3. The computer-implemented method of claim 1, wherein the content includes one or more document object model elements and wherein identifying the one or more policies applicable to the content includes determining whether any of the policies apply to the one or more identified document object model elements.

4. The computer-implemented method of claim 1, wherein identifying the one or more policies applicable to the content is further based at least in part on an identity of a user of the client.

5. The computer-implemented method of claim 1, wherein the executable instructions identify one or more portions of the content to be hidden by the client.

6. The computer-implemented method of claim 1, wherein the content includes one or more navigational controls and wherein the executable instructions are configured to instruct the client to disable at least a subset of the one or more navigational controls.

7. A system for providing content, comprising:

a communication device operable to receive client requests for information and provide responses to the requests;

a data store having stored therein a plurality of policies;

a computing device having one or more processors and being operable to;

receive content responsive to a request from the client;

identify, based at least in part on the content, one or more of the policies applicable to the content;

determine, based at least in part on the identified one or more policies, executable instructions that are configured to cause the client to process the content according to the identified one or more policies;

modify the content to include the executable instructions; and

provide the content for processing by the client.

8. The system of claim 7, wherein the computing device is a proxy server that includes the communication device.

9. The system of claim 7, wherein the content includes one or more document object model elements, wherein the computing system is further operable to identify at least one of the one or more document object model elements to which one or more policies apply, and wherein the executable instructions are configured to cause the client to modify the identified at least one document object model element.

10. The system of claim 7, wherein the computing system is further operable to determine the executable instructions based at least in part on an identity of a user of the client.

11. The system of claim 7, wherein the executable instructions identify one or more portions of the content to be hidden by the client.

12. The system of claim 7, wherein the content includes one or more navigational controls and wherein the executable instructions are configured to instruct the client to disable at least a subset of the one or more navigational controls.

13. The system of claim 7, wherein the executable instructions are configured to instruct the client to prevent the client from causing modification of a data store in response to input from a user of the client.

14. A computer-readable storage medium storing a plurality of computer-executable instructions that cause a computer system to enforce a set of policies, the computer-executable instructions comprising:

instructions that cause the computer system to receive content that is responsive to request from a client;

instructions that cause the computer system to identify, based at least in part on the content and based at least in part on a plurality of policies stored in a data store, one or more of the policies applicable to the content;

instructions that cause the computer system to determine, based at least in part on the identified one or more policies, one or more scripts that are configured to cause the client to process the content according to the identified one or more policies;

instructions that cause the computer system to modify the content to include the script; and

instructions that cause the computer system to provide the content for processing by the client.

15. The computer-readable storage medium of claim 14, wherein the content is an markup document and wherein the one or more scripts include JavaScript.

16. The computer-readable storage medium of claim 14, wherein the content includes one or more document object model elements, wherein the computer-executable instructions include instructions that cause the computer system to identify at least one of the one or more document object model elements to which one or more policies apply, and wherein the one or more scripts are configured to cause the client to modify the identified at least one document object model element.

17. The computer-readable storage medium of claim 14, wherein the instructions that cause the computer system to determine one or more scripts include instructions that cause the computer system to determine the one or more scripts based at least in part on an identity of a user of the client.

18. The computer-readable storage medium of claim 14, wherein the one or more scripts identify one or more portions of the content to be hidden by the client.

19. The computer-readable storage medium of claim 14, wherein the content includes one or more navigational controls and wherein the one or more scripts are configured to instruct the client to disable at least a subset of the one or more navigational controls.

20. The computer-readable storage medium of claim 14, wherein the one or more scripts are configured to instruct the client to prevent the client from causing modification of a data store in response to input from a user of the client.