Obtaining and assessing objective data relating to network resources

Abstract

The subject matter discloses a network comprising a plurality of network resources a method for automatically providing a user device with information regarding communication with a network resource, the method comprising: prior to sending data from the user device to the network resource in communication, retrieving information about the network resource from a directory server; evaluating the data to determine if sending the data to the network resource complies with security criteria according to the information about the network resource; providing the user device with a choice whether to send the data in case the data comprises confidential data.

Description

FIELD OF THE INVENTION[0001]The present invention relates to determining the ownership of a network resource, assessing the legitimacy of the network resource, and identifying sensitive data requested by, or sent to, the network resource via public networks such as Internet messaging systems and peer to peer communication.BACKGROUND OF THE INVENTION[0002]A first problem addressed by the present invention is providing a user with objective information about a network resource:[0003]Users connect to a network—such as the Internet, a public switched telephone network (PSTN), or a cellular (mobile) telephony network-through a user-controlled network-connective client device—such as a personal computer, telephone, or cell (mobile) phone. The user has an interface to the device—such as web browser application, phone display, or man-machine interface[0004]For the purposes of this background discussion, we will focus on a connection to a popular type of network resource: a web site. The use...

AI Technical Summary

Benefits of technology

[0031]In summary, it is a main object of the present invention to provide information about the connection target when a user connects to a network server or sends a message to a recipient or opens a communication session (voice, chat, etc.), thereby enabling the user to better know to whom he is connecting.

[0043]break page into objects and test each object to determine whether a scam target is hidden in the page—this is an innovation of the present invention —verify page address in multiple directory servers to negate possibility of attack on a directory—this is an innovation of the present invention

Problems solved by technology

In addition, even where the site ownership appears to be legitimate, the user still needs to determine whether the site is an inappropriate target to transmit sensitive data to.

In addition, the user is rarely able to determine whether his transmission is done in a manner such that ensures only the authenticated target receives the information.

In summary, users are confronted with many combinations and permutations of seemingly easy-to-respond formats with reassuring text and most users are unable to detect untrustworthy targets.

And even if the user knew how to obtain information about a suspect target, the user would not be sure how to use that highly technical information.

However it is not enough that the session is secure.

A user may not be aware that the network resource is an unauthorized destination.

“micrusoft” example), sometimes the interpretation of the address by the user is wrong, sometimes the address is an alias to a different address that was sent in order to confuse the sender, and sometimes the cost of sending the message to the address is high and if the user had known that he would not have sent it.

Web “phishing” is a threat that occurs when a user gets a link to set his web browser to a page in a site which was designed to receive from him proprietary information.

There is no systematic method that checks the unverified information.

Images