Bot Detection via JavaScript Module and Server Cookie Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting unauthorized bot activities at electronic devices, such as bot scrapers, are ineffective due to their ability to mimic human behavior and bypass cookie-based protections, making it difficult to distinguish between legitimate and malicious activities.
Innovation Solution
A system and method that generates a unique client cookie with a pre-generated flag on the user device, using a JavaScript Module (JSM) to analyze user activity and determine whether it is human or bot-driven, with a proxy server deciding access based on this analysis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If cookie-based detection methods are used to identify bot activities, then implementation simplicity is improved, but detection reliability deteriorates because smart bots can bypass cookie protections
Solution Approach 1:
The patent segments the cookie data into multiple components: original client cookie data, server-generated cookie data, and analysis results. This segmentation allows the system to distribute detection functionality across client and server sides, improving both reliability through comprehensive analysis and ease of implementation through modular architecture.
Solution Approach 2:
The patent performs preliminary analysis of user environment data and generates server cookie data before the actual web request is processed. This preliminary action enables the system to pre-determine whether a request is from a bot or human user, improving detection reliability while maintaining implementation simplicity through advance preparation.
2Measurement precision
If advanced analysis methods are implemented to distinguish bot activities from human activities, then detection precision is improved, but device complexity increases
Solution Approach 1:
The patent introduces server cookie data as an intermediary element that carries analysis results between the server and client. This intermediary simplifies the overall system complexity by encapsulating complex analysis logic on the server side while maintaining a simple client-side interface, thereby improving detection precision without significantly increasing device complexity.
Solution Approach 2:
The system implements self-service by having the client device automatically collect user environment data and send it to the server for analysis. The server then generates appropriate cookie data that the client automatically uses for subsequent requests. This self-service mechanism improves detection precision while minimizing the complexity burden on individual components.
3Reliability
If multiple verification steps are added to block bot activities, then security reliability is improved, but processing time increases
Solution Approach 1:
The patent performs security verification in advance by analyzing user environment data and generating server cookie data before the actual web request processing. This preliminary security check ensures that when the actual request arrives, the verification is already complete, thereby improving security reliability without adding significant processing time to the main request flow.
Solution Approach 2:
The client device automatically performs data collection and sends it to the server for verification without requiring user intervention. The server automatically processes the verification and generates appropriate cookie data. This automated self-service process improves security reliability while minimizing processing time by eliminating manual verification steps.
Data Source
AI summary
A method and a system for detecting an unauthorized activity at a user device are provided. The method comprises: analyzing a first request from the user device, the first request including original client cookie; in response to the original client cookie meeting a predetermined threshold: causing the user device to receive a Java Script Module, thereby enabling the user device to generate a second request, by: receiving server cookie indicative of a given activity associated with the user device being one of: a user activity and a bot activity; generating the second request including first client cookie and the server cookie; determining if the second request is to be transmitted to a web content server associated with the first web page; in response to the server cookie data being indicative of the bot activity: the second request is blocked.