Displaying a security element to help detect spoofing

• US 8,225,403 B2
• Filed: 06/02/2005
• Issued: 07/17/2012
• Est. Priority Date: 06/02/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Curtis, Diane L., Seraji, Seana, Cherian, Vinoo, Filner, Aaron, Ramig, Randal J.
• Primary Examiner(s): Brown, Christopher J
• Assistant Examiner(s): Tabor, Amare F
• Application Number:
  US11/144,137
• Publication Number:
  US 20060277605A1
• Time in Patent Office: 2,602 Days
• Field of Search: 713/188, 726/15, 726 22- 25
• US Class Current: 726/24
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1483 service impersonation, e.g. phishing, pharming or web spoofing detection of rogue wireless access points H04W12/12

Abstract

A security element is displayed that provides information to a user to help ensure that they are not confused or misled into believing that content originates from a trusted source when in fact it does not. The security element shows the user the source of the content and is displayed in such a manner that the source of the content is easily viewable. For example, according to one embodiment, the security element is shown within the title bar of a window. The security element may also be temporarily shown. Providing the user with more information about the site being accessed helps them to make an intelligent decision about their browsing experience. The security element includes at least part of a domain name that identifies the source of the content. The security element may also include the entire domain name. For example, the security element may overlay the screen.

Claims

1. A computer-implemented method for providing information a user to help prevent spoofing, comprising:

displaying content in a small screen;

wherein the content that is displayed within the small screen is associated with a Uniform Resource Locator (URL) that identifies a source of the content;

determining a domain name that comprises a subdomain followed by a second-level domain followed by a top-level domain that is associated with the content directly from text of the URL that identifies the source of the content;

determining how much of the domain name fits within a predetermined space of a security element that is a visual element that identifies the source of the content by displaying at least a portion of the domain name;

automatically shortening the domain name to fit within the predetermined space that prioritizes including characters of the second-level and top-level domains of the domain name within the predetermined space over the subdomain such that characters in the subdomain are removed in the shortening before removing characters from the second-level and top-level domains and wherein characters within the second-level domain are removed in the shortening before removing characters from the top-level domain;

creating the security element that includes a display of the shortened domain name such that the shortened domain name shows the source of the content; and

displaying the security element including the shortened domain name within the small screen.

2. The method of claim 1, wherein the security element is displayed within a title bar.

3. The method of claim 1, wherein the security element is displayed over a portion of the content.

4. The method of claim 1, further comprising temporarily displaying the security element within the small screen.

5. The method of claim 1, wherein displaying the content within the small screen comprises displaying content within a screen having a resolution of less than or equal to 640×

480.

6. The method of claim 1, wherein creating the security element that includes at least a portion of the domain name, comprises truncating the domain name.

7. The method of claim 6, wherein truncating the domain name comprises removing characters from the beginning part of the domain name.

8. The method of claim 1, further comprising determining when the domain changes and in response to the domain changing, updating the security element to reflect the domain change.

9. A computer-readable medium that is not a signal having computer executable instructions for providing information to a user to help prevent spoofing, the instructions comprising:

displaying content in a small screen, wherein the content is associated with a domain having a domain name that identifies a source of the content that is displayed;

extracting the domain name directly from a URL showing the source of the content;

determining how much of the domain name fits within a predetermined space of a security element that is a visual element that identifies the source of the content by displaying at least a portion of the domain name;

automatically shortening the domain name to fit within the predetermined space that prioritizes including characters of the second-level and top-level domains of the domain name over the subdomain such that characters in the subdomain are removed in the shortening before removing characters from the second-level and top-level domains and wherein characters within the second-level domain are removed in the shortening before removing characters from the top-level domain;

creating the security element that indicates the source of the content by displaying the shortened domain name that was automatically shortened within the security element such that the shortened domain name shows the source of the content, and

displaying the security element within the small screen.

10. The computer-readable medium of claim 9, wherein the security element is displayed within a title bar.

11. The computer-readable medium of claim 9, wherein the security element is displayed over a portion of the content.

12. The computer-readable medium of claim 9, further comprising temporarily displaying the security element within the small screen.

13. The computer-readable medium of claim 9, wherein displaying content within the small screen comprises displaying content within a screen having a diagonal size of less than four inches.

14. The computer-readable medium of claim 9, wherein creating the security element that indicates the source of the content comprises including as much of an ending part of the domain name that fits within the predetermined space of the security element.

15. The computer-readable medium of claim 14, further comprising truncating the domain name.

16. An apparatus, comprising:

a hardware-processor and a computer-readable medium;

an operating environment stored on the computer-readable medium and executing on the hardware-processor;

a small display; and

an application operating under the control of the operating environment and operative to perform actions, including;

displaying content in the small display;

wherein the content is associated with a domain name that identifies a source of the content;

extracting the domain name directly from the content;

determining how much of the domain name fits within a predetermined space of a security element;

wherein the security element is a visual element that identifies the source of the content;

shortening the domain name to fit within the predetermined space that prioritizes including characters of the second-level and top-level domains of the domain name over the subdomain such that characters in the subdomain are removed in the shortening before removing characters from the second-level and top-level domains and wherein characters within the second-level domain are removed in the shortening before removing characters from the top-level domain;

creating the security element that shows the source of the content by displaying the shortened domain name within the security element,

displaying the security element including the shortened domain name within the small display.

17. The apparatus of claim 16, wherein the security element is displayed within a title bar.

18. The apparatus of claim 16, wherein displaying the security element within the small display further comprises displaying the security element within the small screen for a predetermined period of time.

19. The Apparatus of claim 16, wherein creating the security element that indicates the source of the content comprises including as much of an ending of the domain name that fits within the predetermined space of the security element.

20. The apparatus of claim 16, further comprising truncating a portion of the domain name.