Patent ID: 9300687
Filing Date: 2016-03-29
CPC Classification: H04L,H04W

Claim Text:
1. A computer-implemented method for preventing unauthorized access to secure content, comprising: accessing, from a client appliance connected in a distributed network, a computing appliance through the world wide web, the computing appliance comprising a DNS server addressed by a particular domain name; receiving, from the computing appliance, a portion of code at the client appliance through a web browser of the client appliance, receiving, to a server appliance connected in the distributed network, a request to access secure content stored on the server appliance by the portion of code; receiving, from the server appliance, a server-origin at the web browser of the client appliance, the server-origin being a part of an HTTP response header comprising an X-Server-Origin response header and being delivered from the server appliance to the client appliance in a comma-separated list; comparing the domain name of the DNS server with server-origin of the secure content; and based on the domain name of the DNS server being exclusive of a set of server-origin values that comprises the server-origin, denying access to the request.