US 11,675,880 B2
Securing webpages, webapps and applications
Benjamin Geoffrey Gidley, Hoofddorp (NL); Catherine Chambers, Ottawa (CA); Yaser Eftekhari Roozbehani, Ottawa (CA); Yegui Cai, Ottawa (CA); and Yuan Xiang Gu, Ottawa (CA)
Assigned to Irdeto B.V., Hoofddorp (NL)
Filed by IRDETO B.V., Hoofddorp (NL)
Filed on Nov. 5, 2020, as Appl. No. 17/89,848.
Application 17/089,848 is a continuation of application No. 16/062,130, granted, now 10,867,016, previously published as PCT/EP2016/081063, filed on Dec. 14, 2016.
Claims priority of application No. 1522315 (GB), filed on Dec. 17, 2015.
Prior Publication US 2021/0049248 A1, Feb. 18, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/12 (2013.01); G06F 21/54 (2013.01); G06F 21/55 (2013.01); G06F 21/16 (2013.01); H04L 9/32 (2006.01); G06F 21/62 (2013.01)
CPC G06F 21/128 (2013.01) [G06F 21/16 (2013.01); G06F 21/54 (2013.01); G06F 21/554 (2013.01); G06F 21/6245 (2013.01); H04L 9/3271 (2013.01); H04L 2209/16 (2013.01); H04L 2209/608 (2013.01)] 13 Claims
OG exemplary drawing
 
1. A method for securing a webpage or a webapp processed by a browser executing on a client system, the method comprising the browser executing an instance of white-box protected code, wherein execution of the instance of white-box protected code causes the client system to:
generate a message comprising message data for use by a control system to perform one or more security tests, the control system communicably connected to the client system via a network;
send the message to the control system to enable the control system to perform the one or more security tests using the message data;
receive a response from the control system based, at least in part, on the message; and
process the response;
wherein the one or more security tests comprises one or more of:
(a) a test to identify whether the instance of white-box protected code is being executed using a debugger;
(b) a test to identify whether data relating to, or provided by, the webpage or webapp is being, or has been, copied;
(c) a test to identify whether validation of data fields of the webpage or webapp is turned on or off;
(d) a test to identify whether blocking of advertisements is turned on or off.