Recursive URL Classification for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional access-control solutions face delays and aesthetically unappealing issues due to the overhead of querying multiple URLs in webpages and difficulties in classifying embedded content, leading to potential blank spots when blocking unauthorized content.
Innovation Solution
A recursive URL classification system that constructs a single classification list for both base URLs and embedded URLs, minimizing server queries and ensuring authorized access by determining the content categories of both the base URL and its embedded URLs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional access-control solutions query multiple URLs separately to obtain classification information, then access control accuracy is improved, but rendering time increases substantially
Solution Approach 1:
The patent merges multiple separate URL classification queries into a single aggregated classification request. The access-control module combines the base URL and all embedded URLs into one unified query to the classification server, which returns a single classification list covering all URLs. This eliminates the need for multiple sequential queries, substantially reducing rendering time while maintaining comprehensive access control accuracy.
Solution Approach 2:
The classification server performs preliminary classification of embedded URLs and caches the results. When a base URL is requested, the server proactively provides pre-classified information for all embedded URLs in the single response, eliminating the need for real-time separate queries during webpage rendering.
2Reliability
If embedded URLs are blocked individually, then access control effectiveness is improved, but webpage aesthetics deteriorate due to blank spots
Solution Approach 1:
The patent merges the classification and blocking decisions for all URLs (base and embedded) into a single unified process. The access-control module receives one aggregated classification list and makes coordinated blocking decisions for all URLs together, ensuring that blocking one embedded URL does not create isolated blank spots but rather maintains overall webpage integrity through unified rendering control.
3Device complexity
If conventional solutions classify only base URLs, then classification complexity is reduced, but classification completeness deteriorates due to unclassified embedded content
Solution Approach 1:
The patent implements a nested classification approach where the classification of embedded URLs is nested within the classification of the base URL. The system first identifies all embedded URLs within the base URL, then recursively classifies each embedded URL, and finally aggregates all classification results into a unified classification list that reflects the hierarchical structure of the webpage content.
Solution Approach 2:
The classification server is designed with multi-functionality to handle both base URL classification and embedded URL classification through a single unified interface. The same classification mechanism serves dual purposes: classifying the requested base URL and proactively classifying all embedded URLs, eliminating the need for separate classification systems.
Data Source
AI summary
In one example, a server-based system may provide a recursive classification of the contents of a URL by: 1) receiving a request for a URL-classification list associated with a base URL, 2) constructing the URL-classification list, and 3) providing, in response to the request, the URL-classification list. The resulting URL-classification list may comprise: 1) content categories occurring in the base URL and 2) content categories occurring in any URLs embedded in the base URL. In another example, a client-based system may restrict access to network resources, based on the contents of a base URL, by: 1) identifying a request from a user to access a base URL, 2) requesting a URL-classification list associated with the base URL, 3) receiving the URL-classification list, and 4) determining, based on the URL-classification list, that access to the base URL is authorized. Corresponding computer-readable media are also disclosed.