WEB PAGE RELOAD

• US 20150106688A1
• Filed: 09/05/2014
• Published: 04/16/2015
• Est. Priority Date: 10/10/2013
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Kaplan, Philippe, Moll, Georges-Henri, Oudot, Olivier, Nodet, Xavier
• Granted Patent: US 10,042,945 B2
• Time in Patent Office: Days
• US Class Current: 715/234
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/146 Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding

Abstract

A method and Web server for verifying a Web service request originating from a Web page is provided. The method includes matching the Web service request with a Web service. A sequence ID contained in the request is identified. The Web service request is verified if the identified sequence ID does not correspond with a previous sequence ID for the matched Web service. Additionally, the Web service does not verify a same Web service request twice.

Claims

1. A Web server comprising a computer processor coupled to a computer-readable memory unit, a matcher component, an identifier component, and a verifier component, said memory unit comprising instructions that when executed by the computer processor implements a method for verifying a Web service request originating from a Web form, said method comprising:

matching, by said computer processor executing said matcher component, the Web service request with a Web service;

identifying, by said computer processor executing said identifier component, a sequence ID contained in the request; and

verifying, by said computer processor executing said verifier component, the Web service request if the identified sequence ID does not correspond with an already received sequence ID for the matched Web service, wherein the Web service does not verify a same Web service request twice.

2. The Web server of claim 1, further comprising a suppressor component, and wherein said method further comprises:

suppressing, by said computer processor executing said suppressor component, the Web service request, if the Web service request is not verified, by removing critical parameters from the Web service request before the request is passed on to Web service.

3. The Web server of claim 1, wherein the Web service ignores extra parameters in the Web service request if the Web service request has not been verified.

4. The Web server of claim 1, wherein said sequence ID is determined by a sequence ID generator.

5. The Web server of claim 1, wherein each sequential request for the Web service is associated with a next sequential ID in a sequence of sequence IDs as embedded respectively in the Web page and the Web service.

6. The Web server of claim 5, wherein the sequence of sequence IDs comprises a simple arithmetical progression.

7. The Web server of claim 1, wherein the sequence ID comprises a generated token.

8. The Web server of claim 1, wherein the sequence ID is associated with a particular user session.

9. The Web server of claim 1, further comprising a code generator component for creating pages, wherein said method further comprises:

embedding, by said computer processor executing said code generator, one or more restricted user controls in a page associated with a sequence ID generator, wherein any Web request received from a restricted user control includes said sequence ID generated by the sequence ID generator.

10. A method for verifying a Web service request originating from a Web page, the method comprising:

matching, by a computer processor of a Web server executing a matcher component of the Web server, the Web service request with a Web service;

identifying, by the computer processor executing an identifier component of the Web server, a sequence ID contained in the request; and

verifying, by the computer processor executing a verifier component of the Web server, the Web service request if the identified sequence ID does not correspond with a previous sequence ID for the matched Web service, wherein the Web service does not verify a same Web service request twice.

11. The method of claim 10, further comprising:

suppressing, by said computer processor executing a suppressor component of the Web server, the Web service request, if the Web service request is not verified, by removing critical parameters from the Web service request before the request is passed on to Web service.

12. The method of claim 10, wherein the Web service ignores extra parameters in the Web service request if the Web service request has not been verified.

13. The method of claim 10, wherein said sequence ID is determined by a sequence ID generator.

14. The method of claim 10, wherein each sequential request for the Web service is associated with a next sequential ID in a sequence of sequence IDs as embedded respectively in the Web page and the Web service.

15. The method of claim 14, wherein the sequence of sequence IDs comprises a simple arithmetical progression.

16. The method of claim 10, wherein the sequence ID comprises a generated token.

17. The method of claim 10, wherein the sequence ID is associated with a particular user session.

18. The method of claim 10, further comprising:

embedding, by said computer processor executing a code generator of the Web server, one or more restricted user controls in a page associated with a sequence ID generator, wherein any Web request received from a restricted user control includes said sequence ID generated by the sequence ID generator.

19. The method of claim 10, further comprising:

providing at least one support service for at least one of creating, integrating, hosting, maintaining, and deploying computer-readable code in the computing system, said code being executed by the computer processor to implement said matching, said identifying, and said verifying.

20. A computer program product, comprising a computer readable hardware storage device storing a computer readable program code, said computer readable program code comprising an algorithm that when executed by a computer processor of a Web server system implements a method, said method comprising:

matching, by the computer processor executing a matcher component of the Web server, the Web service request with a Web service;

identifying, by the computer processor executing an identifier component of the Web server, a sequence ID contained in the request; and

verifying, by the computer processor executing a verifier component of the Web server, the Web service request if the identified sequence ID does not correspond with a previous sequence ID for the matched Web service, wherein the Web service does not verify a same Web service request twice.