Proxy Website Detection Using Advertising Account ID Signatures

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a need for systems and methods to enforce policies effectively with respect to proxy communications, as existing technologies lack efficient mechanisms to identify and block proxy websites, which can compromise security and access control.

Innovation Solution

The proposed solution involves analyzing website content for patterns similar to those of known non-proxy websites, comparing identifiers, and categorizing suspected proxy websites, with methods including intercepting requests, analyzing content for checksums, and blocking interactions based on mismatches or suspicious patterns.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If website content analysis is performed to identify proxy websites, then detection accuracy is improved, but system complexity increases

Engineering Contradiction:
Improveproxy website detection accuracyVSAvoidcontent analysis system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent segments the website content analysis into multiple independent components: extracting website identifiers, retrieving signature content from databases, comparing identifiers, and analyzing content patterns. Each component operates independently and contributes to the overall detection accuracy without requiring the entire system to be complex.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent performs preliminary actions by pre-collecting and storing signature content from known non-proxy websites in a database before actual detection occurs. This pre-processing step creates reference data that simplifies the real-time detection process, as the system only needs to compare against pre-established signatures rather than analyzing everything from scratch.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If multiple content patterns are analyzed for proxy detection, then detection reliability is improved, but processing time increases

Engineering Contradiction:
Improveproxy detection reliabilityVSAvoidcontent analysis time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies partial action by selecting and analyzing only the most relevant content patterns rather than examining every possible element of website content. The system compares website identifiers and signature content, focusing on key discriminative features that provide sufficient reliability for detection without requiring exhaustive analysis of all content elements.

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The system uses self-service by automatically comparing website identifiers against stored signatures and making detection decisions based on pattern matching. The automated comparison process eliminates manual analysis time while maintaining reliable detection through systematic evaluation of multiple content patterns.

Inventive Principle:
Principle #25Self-service

3Measurement precision

If website identifiers are compared against known non-proxy websites, then proxy identification accuracy is improved, but information processing requirements increase

Engineering Contradiction:
Improveidentifier matching accuracyVSAvoiddata processing volume
Core Design Contradiction:
Measurement precisionVSQuantity of substance

Solution Approach 1:

The patent extracts only the essential website identifier elements needed for comparison rather than processing entire website contents. By isolating and comparing specific identifier components against stored signatures, the system achieves accurate proxy identification while minimizing the volume of data that must be processed and stored.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system uses copying by storing signature representations of known non-proxy website identifiers in a database. These compact signature copies serve as reference data that can be quickly compared against encountered website identifiers, providing accurate matching without requiring the original full website content to be retained or re-processed.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS8695091B2Systems and methods for enforcing policies for proxy website detection using advertising account ID
Publication Date: 2014.04.08 SOPHOS LTD
  • US8695091B2 patent drawing
  • US8695091B2 patent drawing
  • US8695091B2 patent drawing

AI summary

In embodiments of the present invention improved capabilities are described for systems and methods that enforce policies with respect to proxy communications.