Secure Network Channel via Context Signature Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web applications are vulnerable to script injection attacks, where malicious data with embedded scripts can compromise user activities and initiate distributed denial of service attacks, due to the execution of scripts in web browsers.
Innovation Solution
An application manager apparatus selects a client-server key based on a client's IP address and request time, generates a context signature, and encrypts it using a private key, providing a secure channel by sending the key and encrypted signature back to the client, preventing unauthorized decryption and modification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If web applications execute scripts dynamically in web browsers to provide client access to server functionality, then user interaction and application functionality are improved, but the system becomes vulnerable to script injection attacks and security compromises
Solution Approach 1:
The patent introduces an application manager as an intermediary component that sits between the web browser and the web application server. This manager intercepts and manages script execution, providing a secure environment for dynamic script processing while preventing malicious scripts from compromising the system. The intermediary validates and controls script behavior, allowing legitimate functionality while blocking attacks.
Solution Approach 2:
The patent segments the web application architecture by separating the execution environment into distinct layers: the web browser, the application manager, and the web application server. This segmentation isolates script execution within controlled boundaries, preventing script injection attacks from propagating across the entire system. Each layer has specific responsibilities and security boundaries.
2Adaptability or versatility
If the system provides open network access for web applications, then accessibility and usability are improved, but the system becomes exposed to unauthorized access and distributed denial of service attacks
Solution Approach 1:
The patent implements preliminary security actions by establishing secure communication channels and validating requests before they reach the web application server. The application manager pre-processes incoming traffic, authenticates clients, and sets up secure contexts in advance, preventing unauthorized access and DoS attacks before they can compromise the system.
Solution Approach 2:
The patent incorporates feedback mechanisms where the application manager continuously monitors network traffic and script execution patterns. When suspicious activity or attacks are detected, the system responds by blocking malicious requests, adjusting security parameters, and providing feedback to clients, thereby maintaining secure network accessibility.
Data Source
AI summary
A method, non-transitory computer readable medium and device that assists providing a secure channel includes selecting a client-server key from a plurality of client-server keys based on an IP address of a client computing device and a time of receiving a request from the client computing device wherein the selecting further includes identifying an index value associated with the selected client-server key. Next, a context signature is generated based on the IP address of the client computing device, the time of receiving the request from the client computing device and the index value associated with the selected client-server key. Next, the generated context signature is encrypted using a stored private key. A secure channel is provided by preparing and sending a response including the selected client-server key and the encrypted context signature back to the client computing device.