Method and system for containment of networked application client software by explicit human input

• US 8,539,063 B1
• Filed: 08/29/2003
• Issued: 09/17/2013
• Est. Priority Date: 08/29/2003
• Status: Active Grant

• Current Assignee: McAfee, LLC
• Original Assignee: McAfee, Inc. (McAfee, LLC)
• Inventors: Sharma, Rosen, Shah, Bakul, Sebes, E. John
• Primary Examiner(s): GOODCHILD, WILLIAM J
• Application Number:
  US10/651,591
• Publication Number:
  US 20130246517A1
• Time in Patent Office: 3,672 Days
• Field of Search: 709/229
• US Class Current: 709/224
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04L 67/566 Grouping or aggregating service requests, e.g. for unified processing

Abstract

Method and system for containing networked application client software in order to perform specified transactions only given explicit consent of a legitimate user. In one embodiment, a confirmation interceptor intercepts a service request message, queries the user of the request for a confirmation, and then either passes the service request message onto server application software or drops the request, depending on the user'"'"'s confirmation response. In soliciting and processing the confirmation response, query is formulated so that the required response cannot be automatically generated by software that attempts to automate and simulate the user'"'"'s actions.

Claims

1. A method comprising:

intercepting a service request at a confirmation interceptor;

sending a confirmation request to a user via a confirmation agent, wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction with the user via a communication device that is separate from a host computer, wherein the host computer includes a software agent that originated the service request;

receiving, from the communication device, a confirmation status message at the confirmation interceptor, wherein the confirmation status message is in response to the confirmation request; and

determining acceptability of the confirmation status message, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the status message is unacceptable, usage of a communication conduit associated with a port of the host computer is limited such that e-mail messages cannot be communicated by the host computer.

2. The method of claim 1, after the intercepting step, further comprising the steps of determining if a confirmation mode is on.

3. The method of claim 2, wherein the confirmation mode is on.

4. The method of claim 3, further comprising the step of determining if the service request requires confirmation of explicit human input.

5. The method of claim 4, wherein the service request does require confirmation of explicit human input.

6. The method of claim 5, wherein the confirmation request is sent to a defined confirmation agent.

7. The method of claim 5, wherein the confirmation request is sent to a default confirmation agent.

8. The method of claim 2, wherein the confirmation mode is not on.

9. The method of claim 8, further comprising the step of forwarding the service request from the confirmation interceptor.

10. The method of claim 1, wherein the confirmation status message is acceptable.

11. The method of claim 10, further comprising the step of forwarding the service request from the confirmation interceptor.

12. The method of claim 1, wherein the confirmation status message is unacceptable.

13. The method of claim 12, further comprising the step of discarding the service request at the confirmation interceptor.

14. The method of claim 1, wherein the acceptability of the confirmation status message is determined by comparing the confirmation status message to an expected response.

15. The method of claim 1, wherein the confirmation agent is separate from a source generating the service request.

16. The method of claim 1, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.

17. A system contained by verification of explicit human input, the system comprises:

a server host having server application software;

a confirmation interceptor connected to the server application software, wherein the confirmation interceptor intercepts a service request and receives a confirmation status;

a workstation having user/client software connected to the confirmation interceptor, wherein the user/client software sends the service request to the server application software;

a confirmation agent connected bi-directionally to the confirmation interceptor; and

a user connected bi-directionally to the confirmation agent and connected to the user/client software, wherein the confirmation agent sends a confirmation request to the user and the confirmation status based on a response from the user to the confirmation interceptor to determine acceptability of the confirmation status, further wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction with the user via a communication device that includes the confirmation agent, wherein the communication device is separate from the workstation, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the confirmation status is unacceptable, usage of a communication conduit associated with a port of the workstation is limited such that e-mail messages cannot be communicated by the workstation.

18. The system of claim 17, wherein the user/client software further comprises a network programming interface.

19. The system of claim 17, further comprising a data network through which the user/client software and the confirmation agent connect to the confirmation interceptor.

20. The system of claim 17, wherein the confirmation interceptor is implemented on the server host.

21. The system of claim 17, wherein the confirmation interceptor is implemented on a second server host.

22. The system of claim 17, wherein the confirmation interceptor is implemented in a network device, wherein the network device is part of any communication path to and from the server host.

23. The system of claim 17, wherein the confirmation interceptor is implemented on the workstation.

24. The system of claim 17, wherein the confirmation agent is special-purpose software customized for containing the system.

25. The system of claim 17, wherein the confirmation agent is commercially available communication software.

26. The system of claim 17, wherein the confirmation agent is a separate application from the user/client software generating the service request.

27. The system of claim 17, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.

28. A system contained by verification of explicit human input, the system comprises:

a server host having server application software;

a confirmation interceptor connected to the server application software, wherein the confirmation interceptor intercepts a service request and receives a confirmation status;

a first workstation host having user/client software connected to the confirmation interceptor, wherein the user/client software sends the service request to the server application software;

a second workstation host having a confirmation agent connected bi-directionally to the confirmation interceptor; and

a user connected bi-directionally to the confirmation agent and connected to the user/client software, wherein the confirmation agent sends a confirmation request to the user and the confirmation status based on a response from the user to the confirmation interceptor to determine acceptability of the confirmation status, further wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction with the user via the second workstation host that is separate from the first workstation host, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the confirmation status is unacceptable, usage of a communication conduit associated with a port of the first workstation host is limited such that e-mail messages cannot be communicated by the first workstation host.

29. The system of claim 28, wherein the user/client software further comprises a network programming interface.

30. The system of claim 28, further comprising a data network through which the user/client software and the confirmation agent connect to the confirmation interceptor.

31. The system of claim 28, wherein the confirmation interceptor is implemented on the server host.

32. The system of claim 28, wherein the confirmation interceptor is implemented on a second server host.

33. The system of claim 28, wherein the confirmation interceptor is implemented in a network device, wherein the network device is part of any communication path to and from the server host.

34. The system of claim 28, wherein the confirmation interceptor is implemented on the first workstation host.

35. The system of claim 28, wherein the confirmation agent is special-purpose software customized for containing the system.

36. The system of claim 28, wherein the confirmation agent is commercially available communication software.

37. The system of claim 28, wherein the confirmation agent is a communication device.

38. The system of claim 28, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.

39. A system contained by verification of explicit human input, the system comprises:

a server host having server application software;

a confirmation interceptor connected to the server application software, wherein the confirmation interceptor intercepts a service request and receives a confirmation status;

a workstation host having user/client software connected to the confirmation interceptor, wherein the user/client software sends the service request to the server application software; and

a confirmation agent connected bi-directionally to the confirmation interceptor, wherein the confirmation agent sends a confirmation request to a user and the confirmation status based on a response from the user to the confirmation interceptor to determine acceptability of the confirmation status, further wherein the user is connected bi-directionally to the confirmation agent and is connected to the user/client software, further wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction with the user via a communication device that includes the confirmation agent, wherein the communication device is separate from the workstation host, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the confirmation status is unacceptable, usage of a communication conduit associated with a port of the workstation host is limited such that e-mail messages cannot be communicated by the workstation host.

40. The system of claim 39, wherein the user/client software further comprises a network programming interface.

41. The system of claim 39, further comprising a data network through which the user/client software and the confirmation agent connect to the confirmation interceptor.

42. The system of claim 39, wherein the confirmation interceptor is implemented on the server host.

43. The system of claim 39, wherein the confirmation interceptor is implemented on a second server host.

44. The system of claim 39, wherein the confirmation interceptor is implemented in a network device, wherein the network device is part of any communication path to and from the server host.

45. The system of claim 39, wherein the confirmation interceptor is implemented on the workstation host.

46. The system of claim 39, wherein the confirmation agent is special-purpose software customized for containing the system.

47. The system of claim 39, wherein the confirmation agent is commercially available communication software.

48. The system of claim 39, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.

49. A system contained by verification of explicit human input, the system comprises:

a server host having server application software;

a confirmation interceptor connected to the server application software, wherein the confirmation interceptor intercepts a service request and receives a confirmation status;

a workstation host having user/client software connected to the confirmation interceptor, wherein the user/client software sends the service request to the server application software;

a first data network through which the user/client software connects to the confirmation interceptor;

a confirmation agent connected bi-directionally to the confirmation interceptor;

a second data network through which the confirmation agent connects to the confirmation interceptor; and

a user connected bi-directionally to the confirmation agent and connected to the user/client software, wherein the confirmation agent sends a confirmation request to the user and the confirmation status based on a response from the user to the confirmation interceptor to determine acceptability of the confirmation status, further wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction with the user via a communication device that includes the confirmation agent, wherein the communication device is separate from the workstation host, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the confirmation status is unacceptable, usage of a communication conduit associated with a port of the workstation host is limited such that e-mail messages cannot be communicated by the workstation host.

50. The system of claim 49, wherein the user/client software further comprises a network programming interface.

51. The system of claim 49, wherein the confirmation interceptor is implemented on the server host.

52. The system of claim 49, wherein the confirmation interceptor is implemented on a second server host.

53. The system of claim 49, wherein the confirmation interceptor is implemented in a network device, wherein the network device is part of any communication path to and from the server host.

54. The system of claim 49, wherein the confirmation interceptor is implemented on the workstation host.

55. The system of claim 49, wherein the confirmation agent is special-purpose software customized for containing the system.

56. The system of claim 49, wherein the confirmation agent is commercially available communication software.

57. The system of claim 49, wherein the confirmation agent is a separate application from the user/client software generating the service request.

58. The system of claim 49, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.

59. A system contained by verification of explicit human input, the system comprises:

a server host having server application software;

a confirmation interceptor connected to the server application software, wherein the confirmation interceptor intercepts a service request and receives a confirmation status;

a first workstation host having user/client software connected to the confirmation interceptor, wherein the user/client software sends the service request to the server application software;

a second workstation host having a confirmation agent connected bi-directionally to the confirmation interceptor;

a user connected bi-directionally to the confirmation agent and connected to the user/client software, wherein the confirmation agent sends a confirmation request to the user and the confirmation status based on a response from the user to the confirmation interceptor to determine acceptability of the confirmation status, further wherein the confirmation request comprises one or more dialogues configured to require human participation by the user, wherein a selected one of the dialogues involving the confirmation request includes a short message service interaction between the user via device the second workstation host that is separate from the first workstation host; and

an interface connected to the confirmation interceptor, wherein the interface logs interactive events between the confirmation interceptor, the confirmation agent, and the user in a log summary, wherein the service request is associated with a destination other than the confirmation interceptor, and wherein if the confirmation status is unacceptable, usage of a communication conduit associated with a port of the first workstation host is limited such that e-mail messages cannot be communicated by the first workstation host.

60. The system of claim 59 wherein the log summary comprises address information, protocol information, host information, date and time information and status information.

61. The system of claim 59 wherein the log summary comprises a source host address of a communication channel intercepted, a destination host address of the communication channel intercepted, a protocol used to intercept the service request, host information for the communication interceptor, date and time data of interception of the service request, service request message information, a confirmation agent communication log and a communication status.

62. The system of claim 59, wherein the confirmation agent is a separate application from the user/client software generating the service request.

63. The system of claim 59, wherein at least one of the dialogues includes a natural language puzzle to be successfully answered with human reasoning in order to satisfy the service request.