SECURE TRANSPORT OF WEB FORM SUBMISSIONS

• US 20140096259A1
• Filed: 09/28/2012
• Published: 04/03/2014
• Est. Priority Date: 09/28/2012
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Segal, Ory, Gan, Orli
• Granted Patent: US 10,068,083 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/42 using separate channels for security data
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24

Abstract

Methods and systems for secure web form submission may implement one or more operations including, but not limited to: receiving web content including at least one web form from a web server at a client; determining a value of at least one web form submission security attribute of the at least one web form; and transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute.

Claims

1. A method for secure submission of data associated with at least one web form comprising:

receiving web content including at least one web form from a web server at a client;

determining a value of at least one web form submission security attribute of the at least one web form; and

transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute.

2. The method of claim 1, wherein the transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute comprises:

validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication.

3. The method of claim 2, wherein the validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication comprises:

obtaining a security certificate associated with the web server from the web server.

4. The method of claim 3, further comprising:

determining a validity of the security certificate associated with the web server; and

allowing or restricting transmission of the at least one web form according the validity of the security certificate associated with the web server.

5. The method of claim 1, further comprising:

providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute.

6. The method of claim 5, wherein the providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute comprises:

displaying a graphical certification notification associated with the at least one web form according to the at least one web form submission security attribute.

7. The method of claim 1, wherein the transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute further comprises:

providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute;

receiving a user input associated with an authorization or a prohibition of transmission of the submission data associated with at least one web form responsive to the notification; and

transmitting the submission data associated with at least one web form according to the user input.

8. A system for secure web form submission comprising:

means for receiving web content including at least one web form from a web server at a client;

means for determining a value of at least one web form submission security attribute of the at least one web form; and

means for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute.

9. The system of claim 8, wherein the means for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute comprises:

means for validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication.

10. The system of claim 9, wherein the means for validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication comprises:

means for obtaining a security certificate associated with the web server from the web server.

11. The system of claim 10, further comprising:

means for determining a validity of the security certificate associated with the web server; and

means for allowing or restricting transmission of the at least one web form according the validity of the security certificate associated with the web server.

12. The system of claim 8, further comprising:

means for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute.

13. The system of claim 12, wherein the means for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute comprises:

means for displaying a graphical certification notification associated with the at least one web form according to the at least one web form submission security attribute.

14. The system of claim 8, wherein the means for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute further comprises:

means for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute;

means for receiving a user input associated with an authorization or a prohibition of transmission of the submission data associated with at least one web form responsive to the notification; and

means for transmitting the submission data associated with at least one web form according to the user input.

15. A non-transitory computer-readable medium tangibly embodying computer readable instructions for execution by a computing device, the instructions comprising:

instructions for receiving web content including at least one web form from a web server at a client;

instructions for determining a value of at least one web form submission security attribute of the at least one web form; and

instructions for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute.

16. The computer-readable medium of claim 15, wherein the instructions for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute comprises:

instructions for validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication.

17. The computer-readable medium of claim 16, wherein the instructions for validating that a uniform resource locator (URL) address associated with the at least one web form can accept a secure communication comprises:

instructions for obtaining a security certificate associated with the web server from the web server.

18. The computer-readable medium of claim 17, further comprising:

instructions for determining a validity of the security certificate associated with the web server; and

instructions for allowing or restricting transmission of the at least one web form according the validity of the security certificate associated with the web server.

19. The computer-readable medium of claim 15, further comprising:

instructions for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute.

20. The computer-readable medium of claim 19, wherein the instructions for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute comprises:

instructions for displaying a graphical certification notification associated with the at least one web form according to the at least one web form submission security attribute.

21. The computer-readable medium of claim 15, wherein the instructions for transmitting submission data associated with the at least one web form from the client to the web server according to the value of the web form submission security attribute further comprises:

instructions for providing a certification notification associated with the at least one web form according to the at least one web form submission security attribute;

instructions for receiving a user input associated with an authorization or a prohibition of transmission of the submission data associated with at least one web form responsive to the notification; and

instructions for transmitting the submission data associated with at least one web form according to the user input.