Secure Analysis Application For Accessing Web Resources Via URL Forwarding

• US 20170180413A1
• Filed: 03/09/2017
• Published: 06/22/2017
• Est. Priority Date: 02/20/2015
• Status: Active Grant

• Current Assignee: Authentic8, Inc.
• Original Assignee: Authentic8, Inc.
• Inventors: PETRY, Scott M., RAJAGOPAL, Ramesh, LUND, Peter K., COX, Fredric L., MOORE, Adam P., DUNSTON, Leslie L., TAYLOR, Varley H., SEGAL, Zachary L., STOLYAROV, Luka I., MCMAINS, Joshua R., ZAUGG, Brian T.
• Granted Patent: US 10,027,700 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 45/306 Route determination based on the nature of the carried application
• CPC Class Codes: H04L 63/0209 Architectural arrangements, e.g. perimeter networks or demilitarized zones
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/1433 Vulnerability analysis
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/563 Data redirection of data network streams

Abstract

Embodiments described herein may be directed to systems, methods, apparatuses, devices, computer program products, computer-executable instructions, and/or applications for securely and anonymously accessing web resources and customizable attribution of identity. In accordance with the present disclosure, a user may inspect and analyze a webpage as well as the underlying source code from an “arm'"'"'s length” using a secure analysis application to prevent exposure on the user'"'"'s local machine. The secure analysis application may provide increased flexibility in masking and/or modifying the user'"'"'s digital persona to external websites. Additionally, the secure analysis application may be integrated with a translation service to translate textual web content without the web content provider being alerted that a translation is taking place.

Claims

1. A computing apparatus defining a first location in a network and comprising:

at least one memory comprising instructions; and

at least one processing device configured for executing the instructions, wherein the instructions cause the at least one processing device to perform the operations of;

establishing, using a secure analysis application comprised in the at least one memory, a web browsing session with the network;

selecting, using a traffic routing unit comprised in the at least one processing device, a secure web container through which web content is to be accessed during the web browsing session, wherein the secure web container defines a second location in the network different than the first location;

selecting, using the traffic routing unit, an egress node through which the web content is to be routed during the web browsing session, wherein the egress node defines a third location in the network different than the first location and the second location; and

displaying, using a graphical processing unit (GPU) comprised in the at least one processing device, the web content to a user of the computing apparatus.

2. The computing apparatus of claim 1, wherein the instructions further cause the at least one processing device to perform the operations of:

generating, using a content management unit of the at least one processing device, a request to receive, at the secure web container, the web content from a web server; and

transmitting, using the traffic routing unit, the request to the secure web container,

wherein the request is transmitted to the web server from the secure web container via the network by routing the request through the egress node, and

wherein the web server is unable to determine at least one of the first location and the second location.

3. The computing apparatus of claim 2, wherein the web content is received at the secure web container from the web server via the network in response to transmitting the request to the web server, and wherein the web server defines a fourth location in the network different than the first location, the second location, and the third location.

4. The computing apparatus of claim 3, wherein the instructions further cause the at least one processing device to perform the operations of:

identifying, using a translation unit associated with the secure web container, text comprised in the web content, wherein the text defines a first language;

extracting, using the translation unit, the text from the web context;

transmitting, using the translation unit, the text to a translation service for translation, wherein the translation service is unable to determine the fourth location; and

receiving, using the translation unit and at the secure web container, translated text defining a second language different than the first language,

wherein displaying the web content to the user of the computing apparatus comprises accessing the translated text using the translation unit.

5. The computing apparatus of claim 4, wherein the instructions further cause the at least one processing device to perform the operations of:

storing, using a storage mapping unit associated with the secure web container, at least one of the web content, the text, and the translated text in a cloud-based storage platform.

6. The computing apparatus of claim 1, wherein selecting the secure web container comprises selecting two or more secure web containers through which the web content is to be accessed, and wherein each of the two or more secure web containers defines a different location in the network.

7. The computing apparatus of claim 1, wherein selecting the egress node comprises selecting two or more egress nodes through which the web content is to be routed, and wherein each of the two or more egress nodes defines a different location in the network.

8. A non-transitory computer readable medium defining a first location in a network and comprising code, wherein the code, when executed by at least one processing device of a computing apparatus, causes the at least one processing device to perform the operations of:

establishing, using a secure analysis application comprised in the at least one memory, a web browsing session with the network;

selecting, using a traffic routing unit comprised in the at least one processing device, a secure web container through which web content is to be accessed during the web browsing session, wherein the secure web container defines a second location in the network different than the first location;

selecting, using the traffic routing unit, an egress node through which the web content is to be routed during the web browsing session, wherein the egress node defines a third location in the network different than the first location and the second location; and

displaying, using a graphical processing unit (GPU) comprised in the at least one processing device, the web content to a user of the computing apparatus.

9. The non-transitory computer readable medium of claim 8, wherein the non-transitory computer readable medium further comprises code that, when executed by the at least one processing device of the video content server, causes the at least one processing device to perform the operations of:

generating, using a content management unit of the at least one processing device, a request to receive, at the secure web container, the web content from a web server; and

transmitting, using the traffic routing unit, the request to the secure web container,

wherein the request is transmitted to the web server from the secure web container via the network by routing the request through the egress node, and

wherein the web server is unable to determine at least one of the first location and the second location.

10. The non-transitory computer readable medium of claim 9, wherein the web content is received at the secure web container from the web server via the network in response to transmitting the request to the web server, and wherein the web server defines a fourth location in the network different than the first location, the second location, and the third location.

11. The non-transitory computer readable medium of claim 10, wherein the non-transitory computer readable medium further comprises code that, when executed by the at least one processing device of the video content server, causes the at least one processing device to perform the operations of:

identifying, using a translation unit associated with the secure web container, text comprised in the web content, wherein the text defines a first language;

extracting, using the translation unit, the text from the web context;

transmitting, using the translation unit, the text to a translation service for translation, wherein the translation service is unable to determine the fourth location; and

receiving, using the translation unit and at the secure web container, translated text defining a second language different than the first language,

wherein displaying the web content to the user of the computing apparatus comprises accessing the translated text using the translation unit.

12. The apparatus of claim 11, wherein the non-transitory computer readable medium further comprises code that, when executed by the at least one processing device of the video content server, causes the at least one processing device to perform the operations of:

storing, using a storage mapping unit associated with the secure web container, at least one of the web content, the text, and the translated text in a cloud-based storage platform.

13. The apparatus of claim 8, wherein selecting the secure web container comprises selecting two or more secure web containers through which the web content is to be accessed, and wherein each of the two or more secure web containers defines a different location in the network.

14. The apparatus of claim 8, wherein selecting the egress node comprises selecting two or more egress nodes through which the web content is to be routed, and wherein each of the two or more egress nodes defines a different location in the network.

15. A method comprising:

establishing, using a secure analysis application comprised in at least one memory of a computing apparatus defining a first location in a network, a web browsing session with the network;

selecting, using a traffic routing unit comprised in at least one processing device of the computing apparatus, a secure web container through which web content is to be accessed during the web browsing session, wherein the secure web container defines a second location in the network different than the first location;

selecting, using the traffic routing unit, an egress node through which the web content is to be routed during the web browsing session, wherein the egress node defines a third location in the network different than the first location and the second location; and

displaying, using a graphical processing unit (GPU) comprised in the at least one processing device, the web content to a user of the computing apparatus.

16. The method of claim 15, further comprising:

generating, using a content management unit of the at least one processing device, a request to receive, at the secure web container, the web content from a web server;

transmitting, using the traffic routing unit, the request to the secure web container;

transmitting, from the secure web container and using a second traffic routing unit associated with the secure web container, the request to the web server via the network by routing the request through the egress node,

wherein the web server is unable to determine at least one of the first location and the second location.

17. The method of claim 16, further comprising:

receiving, using the second traffic routing unit, the web content at the secure web container from the web server via the network in response to transmitting the request to the web server, wherein the web server defines a fourth location in the network different than the first location, the second location, and the third location.

18. The method of claim 17, further comprising:

identifying, using a translation unit associated with the secure web container, text comprised in the web content, wherein the text defines a first language;

extracting, using the translation unit, the text from the web context;

transmitting, using the translation unit, the text to a translation service for translation, wherein the translation service is unable to determine the fourth location; and

receiving, using the translation unit and at the secure web container, translated text defining a second language different than the first language,

wherein displaying the web content to the user of the computing apparatus comprises accessing the translated text using the translation unit.

19. The method of claim 15, wherein selecting the secure web container comprises selecting two or more secure web containers through which the web content is to be accessed, and wherein each of the two or more secure web containers defines a different location in the network.

20. The method of claim 15, wherein selecting the egress node comprises selecting two or more egress nodes through which the web content is to be routed, and wherein each of the two or more egress nodes defines a different location in the network.