Method, system, and apparatus for encrypting a web browser script

• US 20020166051A1
• Filed: 05/03/2001
• Published: 11/07/2002
• Est. Priority Date: 05/03/2001
• Status: Abandoned Application

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Moser, Marvin
• Application Number:
  US09/847,709
• Publication Number:
  US 20020166051A1
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/128 involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

A method, system, and apparatus for encrypting a web browser script that prevents an unauthorized user from inspecting or reverse engineering the script and is compatible with any script-enabled web browser. When development of a script is complete, a script author uses an encryption program to encrypt the script, modify the web page to refer to the encrypted script, and create a decryption program capable of decrypting the encrypted script. The system makes the encrypted script publicly available on the Internet by copying the encrypted script, modified web page, and decryption program to a web server. A user accessing the encrypted script uses a web browser on the client computer to request from a web server a web page that includes a reference to the encrypted script. The web browser displays the contents of the web page to the user by interpreting the hypertext markup language (“HTML”) tags embedded in the web page. The HTML tags embedded in the web page identify the uniform resource locators (“URLs”) for the decryption program and encrypted script. The runtime environment of the client computer receives the decryption program and encrypted script from the web server and applies the decryption program to the encrypted script to produce the script. The runtime environment transfers the script to the web browser for execution.

Claims

1. A method that restricts access to a script comprising the steps of:

storing an encrypted script;

storing a hypertext object including a reference to the encrypted script; and

storing a decryption program capable of decrypting the encrypted script, the hypertext object including a reference to the decryption program,

whereby access to the hypertext object only allows access to the encrypted script.

2. The method of claim 1, wherein the hypertext object and the encrypted script are stored on a server.

3. The method of claim 1, wherein the hypertext object and the encrypted script are stored as a single downloadable object.

4. The method of claim 1, wherein the decryption program is stored on a server.

5. The method of claim 1, wherein the encrypted script and the decryption program are stored as a single downloadable object.

6. The method of claim 1, wherein the hypertext object, the encrypted script, and the decryption program are stored as a single downloadable object.

7. The method of claim 1, wherein storing an encrypted script further comprises the steps of:

selecting an encryption algorithm;

selecting an encryption key; and

creating the encrypted script by executing the encryption algorithm and applying the encryption key.

8. The method of claim 7, wherein the encryption algorithm is a symmetric encryption algorithm.

9. The method of claim 7, wherein the encryption algorithm is a public key encryption algorithm.

10. A method that restricts access to a script comprising the steps of:

storing an encrypted script that conceals and restricts access to the script;

storing a hypertext object including a reference to the encrypted script; and

storing a decryption program capable of decrypting the encrypted script, the hypertext object including a reference to the decryption program,

whereby access to the hypertext object only allows access to the encrypted script.

11. The method of claim 10, wherein the hypertext object and the encrypted script are stored on a server.

12. The method of claim 10, wherein the hypertext object and the encrypted script are stored as a single downloadable object.

13. The method of claim 10, wherein the decryption program is stored on a server.

14. The method of claim 10, wherein the encrypted script and the decryption program are stored as a single downloadable object.

15. The method of claim 10, wherein the hypertext object, the encrypted script and the decryption program are stored as a single downloadable object.

16. The method of claim 10, wherein storing an encrypted script further comprises the steps of:

selecting an encryption algorithm;

selecting an encryption key; and

transforming the script into the encrypted script by executing the encryption algorithm and applying the encryption key.

17. The method of claim 16, wherein the encryption algorithm is a symmetric encryption algorithm.

18. The method of claim 16, wherein the encryption algorithm is a public key encryption algorithm.

20. The method of claim 19, wherein the hypertext object and the encrypted script are stored on a server.

21. The method of claim 19, wherein the hypertext object and the encrypted script are stored as a single downloadable object.

22. The method of claim 19, wherein the decryption program is stored on a server.

23. The method of claim 19, wherein the encrypted script and the decryption program are stored as a single downloadable object.

24. The method of claim 19, wherein the hypertext object, the encrypted script, and the decryption program are stored as a single downloadable object.

25. The method of claim 19, wherein storing an encrypted script further comprises the steps of:

selecting an encryption algorithm;

selecting an encryption key; and

transforming the script into the encrypted script by executing the encryption algorithm and applying the encryption key.

26. The method of claim 25, wherein the encryption algorithm is a symmetric encryption algorithm.

27. The method of claim 25, wherein the encryption algorithm is a public key encryption algorithm.

29. The method of claim 28, further comprising the step of:

receiving a request for the encrypted script.

30. The method of claim 29, wherein the request for the encrypted script is prompted by receipt of the hypertext object.

31. The method of claim 28, further comprising the step of:

issuing a request for the encrypted script.

32. The method of claim 31, wherein the request for the encrypted script is prompted by receipt of the hypertext object.

33. The method of claim 28, further comprising the step of:

transferring the decryption program.

34. The method of claim 33, further comprising the step of:

receiving a request for the decryption program.

35. The method of claim 34, wherein the request for the decryption program is prompted by receipt of the hypertext object.

36. The method of claim 33, further comprising the step of:

issuing a request for the decryption program.

37. The method of claim 36, wherein the request for the decryption program is prompted by receipt of the hypertext object.

39. The method of claim 38, further comprising the steps of:

decrypting the encrypted script; and

presenting the hypertext object on a display device.

40. The method of claim 38, further comprising the step of:

issuing a request for the encrypted script.

41. The method of claim 40, wherein the request for the encrypted script is prompted by receipt of the hypertext object.

42. The method of claim 38, further comprising the step of:

receiving a request for the encrypted script.

43. The method of claim 42, wherein the request for the encrypted script is prompted by receipt of the hypertext object.

44. The method of claim 38, further comprising the steps of:

issuing a request for a decryption program; and

receiving the decryption program.

45. The method of claim 44, wherein the request for the decryption program is prompted by receipt of the hypertext object.

46. The method of claim 38, further comprising the steps of:

receiving a request for a decryption program; and

receiving the decryption program.

47. The method of claim 46, wherein the request for the decryption program is prompted by receipt of the hypertext object.

49. The system of claim 48, further comprising:

an encryption key; and

an encryption program capable of encryption the script by applying the encryption key.

50. The system of claim 49, wherein the encryption program implements a symmetric encryption algorithm.

51. The system of claim 49, wherein the encryption program implements a public key encryption algorithm.

19. A method that restricts access to a script comprising the steps of:

storing an encrypted script that conceals and restricts access to the script;

storing a hypertext object that modifies a reference to the script to refer to the encrypted script; and

storing a decryption program capable of decrypting the encrypted script, the hypertext object, the reference to the script further modified to include a reference to the decryption program.

28. A method that restricts access to a script comprising the steps of:

receiving a request for a hypertext object including a reference to an encrypted script and a reference to a decryption program capable of decrypting the encrypted script;

transferring the hypertext object; and

transferring the encrypted script.

38. A method that restricts access to a script comprising the steps of:

issuing a request for a hypertext object including a reference to an encrypted script and a reference to a decryption program capable of decrypting the encrypted script;

receiving the hypertext object; and

receiving the encrypted script.

48. A system that restricts access to a script comprising:

an encrypted script;

a hypertext object including a reference to the encrypted script; and

a decryption program capable of decrypting the encrypted script, the hypertext object including a reference to the decryption program.

52. A system that restricts access to a script comprising:

an encrypted script that conceals and restricts access to the script;

a hypertext object that modifies a reference to the script to refer to the encrypted script; and

a decryption program capable of decrypting the encrypted script, the hypertext object including a reference to the decryption program.

53. The system of claim 52, further comprising:

an encryption key; and

an encryption program capable of encrypting the script by applying the encryption key.

54. The system of claim 53, wherein the encryption program implements a symmetric encryption algorithm.

55. The system of claim 53, wherein the encryption program implements a public key encryption algorithm.