Security Element for Spoofing Detection on Mobile Displays

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In mobile devices with limited screen space, users are vulnerable to spoofing attacks as they cannot easily verify the source of web content due to the impracticality of using the address bar, leading to potential misdirection to untrusted sites.

Innovation Solution

Displaying a security element within the title bar or overlaid on the window that shows at least part of the domain name of the content's source, which can be temporarily shown or truncated to fit the limited space, helping users make informed decisions about their browsing experience.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the address bar is used to display the source of content, then users can verify the source of web content, but on mobile devices with limited screen space, the address bar becomes impractical and users cannot easily verify the source

Engineering Contradiction:
Improvesource verification capabilityVSAvoidusability on mobile devices
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent moves the source verification information from the traditional horizontal address bar dimension to a vertical dimension by displaying the domain name within the title bar area or as an overlay on the web content. This dimensional shift allows source verification to be accessible on mobile devices without requiring additional horizontal screen space, thus resolving the contradiction between reliability and ease of operation on mobile platforms.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Loss of information

If the complete domain name is displayed to show the source of content, then users can fully verify the source, but on devices with limited screen space, the complete domain name cannot be displayed

Engineering Contradiction:
Improvesource information completenessVSAvoidavailable display space
Core Design Contradiction:
Loss of informationVSArea of stationary object

Solution Approach 1:

The patent extracts the essential source verification information (the domain name) from the complete URL and displays only this critical portion in the title bar or as an overlay. This extraction approach allows users to verify the source without requiring display of the entire URL, thus resolving the contradiction between information completeness and available display space by retaining only the most important identifying information.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If a security element is displayed within the title bar or overlaid on the window, then users can see the source of content on mobile devices, but the screen space for displaying web content is reduced

Engineering Contradiction:
Improvesource identificationVSAvoidweb content display area
Core Design Contradiction:
ReliabilityVSArea of stationary object

Solution Approach 1:

The patent implements a partial display approach where the domain name is shown in a truncated or condensed format within the title bar, and the complete domain name can be viewed by user interaction (such as tapping or hovering). This partial display strategy provides sufficient source identification for security purposes while minimizing the impact on web content display area, thus resolving the contradiction between reliability and content display space.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS8225403B2Displaying a security element to help detect spoofing
Publication Date: 2012.07.17 MICROSOFT TECHNOLOGY LICENSING LLC
  • US8225403B2 patent drawing
  • US8225403B2 patent drawing
  • US8225403B2 patent drawing

AI summary

A security element is displayed that provides information to a user to help ensure that they are not confused or misled into believing that content originates from a trusted source when in fact it does not. The security element shows the user the source of the content and is displayed in such a manner that the source of the content is easily viewable. For example, according to one embodiment, the security element is shown within the title bar of a window. The security element may also be temporarily shown. Providing the user with more information about the site being accessed helps them to make an intelligent decision about their browsing experience. The security element includes at least part of a domain name that identifies the source of the content. The security element may also include the entire domain name. For example, the security element may overlay the screen.