TECHNIQUES FOR IDENTIFICATION OF LOCATION OF RELEVANT FIELDS IN A CREDENTIAL-SEEKING WEB PAGE

• US 20170126653A1
• Filed: 10/30/2015
• Published: 05/04/2017
• Est. Priority Date: 10/30/2015
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Lupien, Nicolas, Lakhia, Michael, Gagnon-Lamonde, Hubert
• Granted Patent: US 10,419,423 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/2246 Trees, e.g. B+trees
• CPC Class Codes: G06F 16/986 Document structures and storage, e.g. HTML extensions
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06F 40/174 Form filling; Merging
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

Techniques allow identification of credential fields in a credential form on a web page that can be stored in a credential manager database to allow a credential manager application to fill the credential fields with saved credentials managed by the credential manager.

Claims

1. A machine readable medium, on which are stored instructions, comprising instructions that when executed cause a machine to:

identify a first object associated with a credential field of a web page in a document object model object tree for the web page;

determine a path from a unique origin object in the document object model object tree to the first object associated with the credential field; and

associate the path with the credential field and store the path in a credential manager database.

2. The machine readable medium of claim 1, wherein the instructions that when executed cause the machine to determine a path from a unique origin object comprise instructions that when executed cause the machine to:

determine whether the first object has an attribute having a value unique in the document object model object tree; and

traverse the document object model object tree upwards toward a root node until the unique origin object is found, wherein the unique origin object has an attribute having a value unique in the document object model object tree.

3. The machine readable medium of claim 2, wherein the unique origin object is the root node.

4. The machine readable medium of claim 1, wherein the unique origin object has a non-ephemeral attribute value unique within the web page.

5. The machine readable medium of claim 1, wherein the instructions further comprise instructions that when executed cause the machine to:

evaluate a length of the path; and

send information about the web page, credential field, and path for manual processing if the length has a relation to a predetermined threshold value.

6. The machine readable medium of claim 1, wherein the instructions further comprise instructions that when executed cause the machine to:

generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the unique origin object.

7. The machine readable medium of claim 1, wherein the instructions further comprise instructions that when executed cause the machine to:

determine that the credential field corresponds to a challenge-response functionality; and

mark the credential field as a non-autofill field in the credential manager database.

8. The machine readable medium of claim 1, wherein the instructions further comprise instructions that when executed cause the machine to:

mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.

9. A programmable device, comprising:

one or more processors;

a memory, coupled to the one or more processors, on which are stored instructions, comprising instructions that when executed cause at least some of the one or more processors to;

identify a first object associated with a credential field of a web page in a document object model object tree for the web page;

determine a path from a unique origin object in the document object model object tree to the first object associated with the credential field; and

associate the path with the credential field and store the path in a credential manager database.

10. The programmable device of claim 9, wherein the instructions that when executed cause at least some of the one or more processors to determine a path from a unique origin object comprise instructions that when executed cause at least some of the one or more processors to:

determine whether the first object has an attribute having a value unique in the document object model object tree; and

traverse the document object model object tree upwards toward a root node until the unique origin object is found, wherein the unique origin object has an attribute having a value unique in the document object model object tree.

11. The programmable device of claim 10, wherein the unique origin object is the root node.

12. The programmable device of claim 9, wherein the unique origin object has a non-ephemeral attribute value unique within the web page.

13. The programmable device of claim 9, wherein the instructions further comprise instructions that when executed cause at least some of the one or more processors to:

evaluate a length of the path; and

send information about the web page, credential field, and path for manual processing if the length has a relation to a predetermined threshold value.

14. The programmable device of claim 9, wherein the instructions further comprise instructions that when executed cause at least some of the one or more processors to:

generate a signature for a credential form associated with the web page, the signature based at least in part on the path from the unique origin object.

15. The programmable device of claim 9, wherein the instructions further comprise instructions that when executed cause at least some of the one or more processors to:

determine that the credential field corresponds to a challenge-response functionality; and

mark the credential field as a non-autofill field in the credential manager database.

16. The programmable device of claim 9, wherein the instructions further comprise instructions that when executed cause at least some of the one or more processors to:

mark a credential form associated with the credential field as a non-autosubmit field in the credential manager database.

17. A method, comprising:

identifying a first object associated with a credential field of a web page in a document object model object tree for the web page;

determining a path from a unique origin object in the document object model object tree to the first object associated with the credential field; and

storing the path in a credential manager database as associated with the credential field.

18. The method of claim 17, wherein determining a path from a unique origin object comprises:

determining whether the first object has an attribute having a value unique in the document object model object tree; and

traversing the document object model object tree upwards toward a root node until the unique origin object is found,

wherein the unique origin object has an attribute having a value unique in the document object model object tree.

19. The method of claim 18, wherein the unique origin object is the root node.

20. The method of claim 17, wherein the unique origin object has a non-ephemeral attribute value unique within the web page.

21. The method of claim 17, further comprising:

send information about the web page, credential field, and path for manual processing if a length of the path has a relation to a predetermined threshold value.

22. The method of claim 17, further comprising:

generating a signature for a credential form associated with the web page, the signature based at least in part on the path from the unique origin object.

23. The method of claim 17, further comprising:

determining that the credential field corresponds to a challenge-response functionality; and

marking the credential field as a non-autofill field in the credential manager database.

24. The method of claim 17, further comprising:

marking a credential form associated with the credential field as a non-autosubmit field in the credential manager database.