Intercepting Non-Interceptable Web Object Properties

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Web content integrity is compromised by third-party content modifiers that automatically alter webpages without user consent, affecting functionality and aesthetics, and existing countermeasures are inadequate for dynamic resource identifiers.

Innovation Solution

Encoding and obfuscating resource identifiers using wrapper code that intercepts and transforms requests, employing virtualization techniques to control access to the Document Object Model (DOM) and encode/decode resource identifiers, thereby preventing unauthorized modifications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If third-party content modifiers are used to automatically modify webpages, then content customization and ad-blocking functionality is improved, but web content integrity and security are compromised

Engineering Contradiction:

Improvecontent customization capabilityVSAvoidweb content integrity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a content integrity verification mechanism that acts as an intermediary between the web browser and third-party content modifiers. This verification system intercepts and validates resource requests before they reach the browser, checking digital signatures and hashes to ensure content authenticity. The intermediary layer allows content customization functionality while blocking unauthorized modifications, thus resolving the contradiction between adaptability and reliability.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If resource identifiers are encoded and obfuscated to prevent unauthorized access, then web content security is improved, but resource retrieval complexity increases

Engineering Contradiction:

Improveweb content securityVSAvoidresource retrieval process

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary encoding and obfuscation of resource identifiers before they are embedded in web content. Digital signatures and cryptographic hashes are pre-calculated and attached to resources during the content creation phase. This preliminary action ensures that when resources are retrieved, the verification process is straightforward - simply checking the pre-computed signatures rather than performing complex analysis, thus maintaining security while minimizing retrieval complexity.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If wrapper code is used to intercept and transform resource requests, then unauthorized content modification is prevented, but processing overhead and page load time increase

Engineering Contradiction:

Improvecontent modification protectionVSAvoidresource request processing time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent performs preliminary validation by checking digital signatures and hashes of resources before they are fully loaded into the browser. The wrapper code intercepts resource requests at the network level and verifies content integrity using pre-computed cryptographic values. This preliminary action prevents unauthorized modifications from being loaded in the first place, reducing the need for extensive post-loading verification and minimizing overall processing time.

Inventive Principle:

Principle #10Preliminary action

4Reliability

If digital signatures and cryptographic hashes are implemented for resource verification, then content authenticity is ensured, but computational requirements and energy consumption increase

Engineering Contradiction:

Improvecontent authenticity verificationVSAvoidcomputational energy consumption

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent implements a tiered verification approach where digital signatures and cryptographic hashes are applied selectively to critical resources that require strong authentication, while less sensitive resources use simpler verification methods. This partial application of cryptographic verification ensures content authenticity for essential elements without unnecessarily applying heavy computational overhead to all resources, thus balancing security requirements with energy consumption constraints.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS11341206B2Intercepting not directly interceptable program object property

Publication Date: 2022.05.24 AKAMAI TECHNOLOGIES INC

AI summary

One or more instances in program code that references an identifier of the standard web object model program object property that is prevented by a web browser from being directly reassigned are identified. The one or more instances in the program code that references the identifier of the standard web object model program object property that is prevented by the web browser from being directly reassigned are modified with one or more corresponding replacement references that include a replacement identifier. The replacement identifier id defined in the program code as being associated with a new program object property defined to invoke the standard web object model program object property in addition to being defined to perform additional processing of a resource identifier associated with the invocation of the standard web object model program object property.