Deterministic Client/Server State Reproduction via Challenge Nonces
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for protecting server computers from attacks, such as bot-generated requests, often require excessive storage for mapping or countermeasure implementation, leading to memory constraints and debugging difficulties.
Innovation Solution
A deterministic approach involving challenge nonces and response states, where a server generates a challenge nonce and state, sends it to a client, and validates requests without persistently storing the challenge state or response, allowing for efficient and reproducible security measures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server computer stores mappings for each instance of modified web pages to protect from attacks, then security against bot-generated requests is improved, but storage requirements increase significantly
Solution Approach 1:
The patent extracts the security verification data (mappings) from server-side storage and relocates it to client-side storage. The client computer stores the mappings locally after receiving them from the server, eliminating the need for the server to maintain large storage for mapping data while still enabling security verification against bot attacks.
2Reliability
If the server computer adds countermeasure instructions to modify web pages for security, then protection against attacks is improved, but functionality of web pages may be broken and debugging becomes difficult
Solution Approach 1:
The patent extracts countermeasure instructions from the server-side web page modification process and relocates them to client-side execution. The server provides the countermeasure instructions to the client, which then executes them locally, allowing security measures to be implemented without requiring server-side debugging infrastructure and reducing the impact on web page functionality.
3Ease of repair
If the server computer stores copies of each instance of web page for debugging countermeasures, then ease of debugging is improved, but storage requirements increase significantly
Solution Approach 1:
The patent extracts debugging capabilities from server-side storage of web page instances and relocates them to client-side storage. The client computer stores received web pages locally, enabling debugging of countermeasure instructions without requiring the server to maintain large storage for web page instances.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Computer systems and methods for improving security or performance of client computers interacting with a plurality of server computers. In an embodiment, a computer system comprises a first server computer and a second server computer; wherein the first server computer is configured to: generate a challenge nonce, wherein the challenge nonce corresponds to a challenge state; generate the challenge state based on the challenge nonce, wherein the challenge state corresponds to a response state; send, to a first client computer, the challenge nonce and the challenge state, but not the response state; wherein the second server computer is configured to: receive, from the first client computer, a test nonce and a test response state; determine whether the test response state matches the response state based on the test nonce, without: receiving the challenge state from the first server computer; receiving the challenge state from the first client computer.