Intermediary URL Generation for Bot Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In network environments, increased traffic can lead to server overload, causing service disruptions due to malicious programs or bots that overwhelm resources, making it difficult to differentiate between human users and autonomous programs.

Innovation Solution

A device intermediary between clients and servers generates URLs with randomly generated characters, which are invisible to human users, to detect and track requests from autonomous programs, allowing for the termination of connections to such clients.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the server accepts all incoming traffic, then the service coverage is maximized, but the server becomes overloaded and service quality decreases

Engineering Contradiction:
Improveservice coverageVSAvoidservice quality
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an intermediary device between clients and servers that generates unique URLs and monitors their usage. This intermediary acts as a mediator that filters traffic before it reaches the server, allowing the server to maintain high service coverage while protecting against overload by identifying and blocking malicious autonomous programs through URL tracking.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If the server processes all requests, then productivity is maximized, but resources are exhausted by malicious programs

Engineering Contradiction:
Improverequest processing volumeVSAvoidserver resources
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The patent implements preliminary action by generating and distributing unique URLs to clients before they make actual requests to the server. The intermediary monitors these URL accesses in advance, identifying autonomous programs that attempt to access multiple URLs. This preliminary detection allows the system to block malicious traffic before it consumes server resources, maintaining high productivity while preventing energy exhaustion.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If the system monitors all client behavior, then detection precision is improved, but device complexity increases

Engineering Contradiction:
Improvebot detection accuracyVSAvoidintermediary system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent uses copying by creating unique URL copies for each client instead of implementing complex behavioral monitoring systems. The intermediary generates simple, trackable URLs that clients receive in responses, and monitors only the access patterns of these URL copies. This approach achieves high detection precision by tracking URL usage without requiring complex analysis of client behavior, thereby minimizing device complexity.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS11831678B2Generating URLs to detect autonomous programs systems and methods
Publication Date: 2023.11.28 CITRIX SYSTEMS INC
  • US11831678B2 patent drawing
  • US11831678B2 patent drawing
  • US11831678B2 patent drawing

AI summary

Described embodiments provide systems and methods for detecting autonomous programs is provided. A device, intermediary to a plurality of clients and a plurality of servers, can receive a first request from a first client of the plurality of clients to a server of the plurality of servers via a connection between the device and the first client. The device can include, into a response from the server to the first client, a uniform resource locator (URL) comprising one or more randomly generated characters within a predetermined character space. The device can determine that the first client has an autonomous program responsive to receiving a second request from the first client using the URL. The device can terminate, responsive to the determination, the connection to the first client.