Dynamic Credential Interception for Bot Request Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious users employ bots to commit unauthorized acts on web servers, making it difficult to distinguish between legitimate user requests and bot-generated requests, thereby compromising security.
Innovation Solution
An intermediary computer intercepts and modifies instructions to include credential-morphing operations, generating and updating dynamic credentials over time, which are validated to filter out bot requests and allow legitimate user interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional static credentials are used for authentication, then implementation is simple and straightforward, but security is compromised because bots can easily replicate and submit the same credentials repeatedly
Solution Approach 1:
The patent transforms static credentials into dynamic credentials that automatically change over time. The credential value is generated based on a seed value and elapsed time, creating a moving target that bots cannot replicate. This dynamic nature resolves the security vulnerability while maintaining relatively simple implementation through time-based generation algorithms.
Solution Approach 2:
The patent changes the parameter of credential validity from static to time-dependent. Credentials are valid only within specific time windows and expire automatically, preventing bots from reusing credentials. This parameter change enhances security without requiring complex infrastructure, as the expiration logic is built into the credential generation process.
2Reliability
If dynamic credentials with expiration are implemented, then bot requests are blocked effectively, but legitimate user experience may deteriorate due to frequent re-authentication requirements
Solution Approach 1:
The patent performs preliminary actions by pre-generating and caching valid credential values on the client side before they expire. The browser stores these pre-computed credentials and automatically uses them within their valid time windows, eliminating the need for users to manually re-authenticate and maintaining seamless operation.
Solution Approach 2:
The system implements self-service by automatically managing credential renewal and validation without user intervention. The browser's credential service monitors expiration times, generates new credentials, and submits them automatically, making the security mechanism transparent to users while effectively blocking bots.
3Reliability
If credential validation is performed at every request, then security is maximized, but system performance and response time deteriorate due to increased processing overhead
Solution Approach 1:
The patent applies partial validation by checking only essential credential parameters (such as time window validity) at each request rather than full cryptographic verification. This partial action provides sufficient security to block bots while minimizing processing overhead and maintaining high request throughput.
Solution Approach 2:
The system performs preliminary credential validation and caching on the client side before server interaction. Valid credentials are stored and reused within their time windows, reducing the frequency of server-side validation operations and improving overall system performance while maintaining security.
Data Source
AI summary
In an embodiment, a method comprises intercepting, from a first computer, a first set of instructions that define one or more original operations, which are configured to cause one or more requests to be sent if executed by a client computer; modifying the first set of instructions to produce a modified set of instructions, which are configured to cause a credential to be included in the one or more requests sent if executed by the client computer; rendering a second set of instructions comprising the modified set of instructions and one or more credential-morphing-instructions, wherein the one or more credential-morphing-instructions define one or more credential-morphing operations, which are configured to cause the client computer to update the credential over time if executed; sending the second set of instructions to a second computer.