Unique URL Script Segmentation for Autonomous Program Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems fail to effectively detect and differentiate between human user traffic and autonomous program traffic, leading to service disruptions and security breaches, as existing device fingerprinting mechanisms are prone to non-detection due to autonomous programs mimicking human behavior.
Innovation Solution
The system generates unique URLs and session identifiers for clients, storing them in a distributed hash table, which are used to validate client requests and block autonomous programs by comparing the reference URLs with the stored values, preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a static JAVASCRIPT-based script with a uniform resource locator (URL) is used for receiving client parameters, then the system can process requests from multiple clients, but autonomous programs can execute the same script across multiple domains and trigger requests, leading to non-detection
Solution Approach 1:
The patent divides the previously uniform script into multiple client-specific scripts, each with a unique URL. The system generates a unique URL for each client's session, containing client-specific parameters. This segmentation ensures that each client interacts with its own customized script, preventing autonomous programs from executing the same script across multiple domains and achieving reliable detection.
Solution Approach 2:
The patent applies local quality by making each client's script unique with client-specific parameters embedded in the URL. Instead of using a generic static script for all clients, the system tailors each script's location and parameters to the specific client session, enabling the system to distinguish between legitimate clients and autonomous programs based on their unique script interactions.
2Measurement precision
If device fingerprinting mechanisms are used to detect autonomous programs, then the system can identify client parameters, but autonomous programs can mimic human behavior and spoof fingerprints, leading to failed detection
Solution Approach 1:
The patent implements preliminary action by generating unique URLs and client-specific scripts before the autonomous program can execute any detection attempts. The system establishes a unique identifier and customized script location for each client session in advance, so when requests are made, the system can verify the client's identity through their unique script interaction pattern, preventing spoofing before it occurs.
Solution Approach 2:
The patent introduces a intermediary mechanism where the unique client-specific URL and script act as a mediator between the client and the detection system. Instead of directly analyzing client parameters that can be spoofed, the system uses the unique script interaction as an intermediary verification layer, making it difficult for autonomous programs to mimic human behavior and achieve reliable detection.
3Reliability
If unique URLs are generated and stored in a distributed hash table for each client session, then the system can validate client requests and block autonomous programs, but the device complexity increases
Solution Approach 1:
The patent applies universality by using a distributed hash table that serves multiple functions: storing unique client URLs, validating session identifiers, and enabling script location verification. This single data structure handles all detection and validation operations, reducing the need for multiple separate systems and making the increased complexity manageable while maintaining high detection accuracy.
Data Source
AI summary
Systems and methods for autonomous program management include a device which receives a request from a client responsive to execution of a script on the client. The request may include a location corresponding to the script and an identifier. The device may determine that activity of the client is activity of an autonomous program based on a comparison of the location to a reference being generated by the device for the client and determined using the identifier from the request. The device may block a subsequent request from the client to a server responsive to the determination.