Method for preventing parasitic usage of web page embedded files

• US 7,506,359 B1
• Filed: 09/22/2000
• Issued: 03/17/2009
• Est. Priority Date: 12/23/1999
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ling, Christopher John
• Primary Examiner(s): Lanier; Benjamin E
• Application Number:
  US09/667,366
• Time in Patent Office: 3,098 Days
• Field of Search: 705/14, 709/227, 709/232, 709/203, 713/290, 713/153, 726/2, 726/4, 726/5
• US Class Current: 726/2
• CPC Class Codes: G06F 21/128 involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java

Abstract

A request is received from a client for a web page hosted by a web server. Responsive to this request, a persistent client state object having an identifier therein is returned to the client. When a request is received from a client for elements of the web page hosted by the web server, the client is first required to return the persistent client state object having the identifier therein before the requested web page element is sent to the client.

Claims

1. A method of verifying a right to use an element of a web page hosted by a web server, the method comprising the steps of:

every time a request is made from a client for a web page hosted by a web server, storing an indicator that said client has requested the web page hosted by said web server;

responsive to a request from a client for an element of said web page that is stored in a separate file from the web page and displayed as an embedded element of said web page, checking for said indicator that said client has requested said web page from said web server; and

responding to the request from the client for said element of said web page hosted by the web server according to the result of said checking step,

wherein the element of said web page is eliminated from use by another web site than that of the web server.

2. The method as claimed in claim 1, wherein said storing step comprises:

returning to the client a persistent client state object having an identifier therein; and

wherein said checking step comprises checking for said persistent client state object having the identifier therein returned by said client, prior to said responding step.

3. The method as claimed in claim 2 wherein the persistent client state object is a cookie.

4. The method as claimed in claim 2 wherein the persistent client state object expires after a pre-determined period of time.

5. The method as claimed in claim 1 wherein said storing step comprises adding an identity of said client to a table associated with said web server;

and wherein said checking step comprises checking for said client identity in said table, prior to said responding step.

6. The method as claimed in claim 1 wherein said table includes an expiration time associated with a respective client identity in said table.

15. A computer program product for verifying a right to use an element of a web page, the computer program product comprising:

a computer-readable storage medium having a substrate; and

program data encoded in the substrate of the computer-readable storage medium, wherein the program data comprises means for performing the steps of claim 1, or claim 7.

16. A computer device having a computer program comprising computer program code means adapted to perform all the steps of claim 1 when said program is run on the computer device.

17. The method as claimed in claim 1, wherein if said checking step fails to detect said indicator, said responding step comprises returning a message for display at the client to the client.

18. The method as claimed in claim 1, wherein if said checking step fails to detect said indicator, said responding step comprises returning a substitute element to the client.

19. The method as claimed in claim 1, wherein if said checking step fails to detect said indicator, said responding step comprises returning no response to the client.

7. A method of verifying a right to use an element of a web page hosted by a web server, the method comprising the steps of:

responsive to a request from a client for an element of a web page that is stored in a separate file from the web page and displayed as an embedded element of said web page, checking said request for an indicator that said request results from a client request for a web page hosted by an authorised web server, the indicator having been provided to the client by the authorised web server every time a request was made from the client for the web page hosted by the authorised web server; and

responsive to the presence of such an indicator, responding to the request from the client with said element of a web page,

wherein the element of said web page is eliminated from use by another web site than that of the web server.

8. The method as claimed in claim 7 wherein said indicator comprises a Uniform Resource Locator (URL) for said web page, and said checking step comprises checking that said web page URL is from an authorised web server.

9. The method as claimed in claim 7 wherein said indicator comprises a meta-tag incorporated in web pages from authorised servers, and said checking step comprises checking that said meta-tag is from an authorised web server.

10. The method as claimed in claim 9 wherein said meta-tag is a PICS compliant tag.

11. The method as claimed in claim 7 operable in one of:

said web server or a proxy server connecting said web client to said web server.

12. The method as claimed in claim 7 wherein if said checking step fails to detect said indicator, said responding step comprises returning a message for display at the client to the client.

13. The method as claimed in claim 7 wherein if said checking step fails to detect said indicator, said responding step comprises returning a substitute element to the client.

14. The method as claimed in claim 7 wherein if said checking step fails to detect said indicator, said responding step comprises returning no response to the client.