Signed Link Safety Guarantees for Repeated Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Verifying the safety of web links using web risk services is expensive and consumes valuable resources, especially when multiple users repeatedly check the safety of posted links.
Innovation Solution
Implementing a client link service that caches verified safe links and generates a link safety guarantee signed with a private key, allowing receiving devices to verify the link's safety without rechecking, reducing the need for repeated web risk service queries.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each user device sends a request to the web risk service to verify link safety, then link safety verification is performed, but cost and resource consumption increase
Solution Approach 1:
The system performs link safety verification in advance before the link is shared across multiple devices. The client link service verifies the link safety once and stores the result, so that subsequent user devices can retrieve the pre-verified result without performing redundant verification, thereby reducing resource consumption while maintaining safety reliability
Solution Approach 2:
Instead of each user device performing its own verification with the web risk service, the system creates a copy of the verification result (link safety guarantee) and distributes it to multiple user devices. This copy mechanism allows numerous devices to validate the same link safety information locally without incurring additional verification costs
2Reliability
If link safety verification is performed for every link, then safety is ensured, but processing time increases
Solution Approach 1:
Link safety verification is performed in advance by the client link service before the link is propagated to user devices. The verification result is stored as a link safety guarantee with an expiration time, allowing user devices to retrieve pre-verified links quickly without waiting for real-time verification, thus reducing verification time while maintaining safety
Solution Approach 2:
The verification result is copied and distributed to multiple user devices in advance. Each device receives a link safety guarantee that can be validated locally without requiring time-consuming communication with the web risk service, significantly reducing the time lost to verification processes
3Reliability
If multiple user devices independently verify the same link, then each device ensures safety, but redundant verification increases cost
Solution Approach 1:
The client link service performs link safety verification once in advance and stores the result. When multiple user devices need to verify the same link, they retrieve the pre-stored verification result instead of performing redundant verifications with the web risk service, eliminating duplicate costs while maintaining safety through the stored guarantee
Solution Approach 2:
The system creates and distributes copies of the link safety guarantee to multiple user devices. Instead of each device independently querying the web risk service (incurring repeated costs), devices validate the copied guarantee locally, reducing verification costs to near-zero while maintaining the same safety level
Data Source
AI summary
Presented herein are techniques in which a user device verifies the safety of a link to a resource. A first user device receives a link to a resource and transmits a request to a client link service to determine whether the link is safe. The first user device receives a response indicating that the link is safe and including a link safety guarantee. The first user device transmits the link and the link safety guarantee to one or more second user devices.