User session dependent URL masking

The present invention is directed toward a method, device, and system for enhancing web security by masking a URL embedded in at least some portion of web content. A session dependent URL is generated and masked on a server side prior to being distributed to a customer for viewing. The session dependent URL is only active during the session in which it was generated. After the session has ended information relating to the session, web content, and masking of the URL is purged from memory.

FIELD

The invention relates generally to web services and servers used to provide web service to clients and specifically to masking URLs in web content provided to clients.

BACKGROUND

An important factor, which has led to a rapid growth in people and businesses connecting to the Internet, is the wealth of information it contains and makes available to practically anyone who has a telephone connection and a personal computer. This strength, however, leads to problems when an information or service provider, which uses the Internet as its communications medium, wishes to control the information being accessed.

The information accessible from the Internet is stored on servers, which form part of the Internet infrastructure. The information is accessed by clients, which are controlled by users or customers and are typically connected to, but not part of, the Internet. Normally, the clients connect only to the Internet for a relatively short time using, for example, a dial-up modem connection across a telephone line or an Ethernet adaptor connected to an Ethernet cable.

While communications and information transfer between Internet clients and servers relies on the well-established TCP/IP protocols, higher-level, dedicated protocols are employed to access certain types of information specific to one of the many services available on the Internet. Different services support different formats of information and allow different types of operation on the information.

For example, a Gopher client allows retrieval and display of predominantly text-based information, an FTP (File Transfer Protocol) client supports the transfer between a server and a client of binary or ASCII files, and a World Wide Web (or simply a Web) client can retrieve and display mixed text and graphical information, as well as sounds, movies (usually encoded via MPEG), virtual ‘worlds’, and any other data type for which an appropriate ‘viewer’ (‘helper’) application or ‘plug-in’ is available.

The Web employs the HyperText Transfer Protocol or HTTP to support access by a Web browser of information on a Web server. Of course, when transmitted across the Internet, the HTTP information is wrapped in the TCP/IP protocol. The information retrieved by the Web browser is typically an HTML (HyperText Markup Language) file, which is interpreted by the browser and displayed appropriately on a display screen as a Web page of information.

The Web browser specifies the information it wishes to retrieve using a URL (Universal Resource Locator) of the form:

Typically, “http” indicates that the URL points to a Web page of information. The Internet translates the Internet server name into a physical network location. The server directory is the location on the server of the file and the file name is that of the file in the directory, which contains or generates the required information.

FIG. 1is a diagram illustrating the general form of a typical graphical user interface display100provided by a Web browser, for example the Netscape™ Navigator Web browser or Microsoft Explorer™ Web browser. The display100includes several main areas: an options area104providing the user-options for controlling and configuring the browser, a Web page display area108for displaying a Web page, a location box112for displaying the location, or URL, of the displayed Web page, and a status box116which displays information concerning the status of Web page retrieval.

Also illustrated on the screen is a pointer120, the position of which can be tactily controlled by a user using a computer mouse, roller-ball or equivalent pointing device. The user interacts with the browser by positioning the pointer appropriately on the screen and selecting available options or functions provided by the browser or displayed on the Web page by, for example, ‘clicking’ a mouse button.

An HTML file comprises ASCII text, which includes embedded HTML tags. In general, the HTML tags are used to identify the nature and the structure of the Web page, and to identify HyperText links (hyperlinks), and their associated URLs.

Display capabilities of a Web browser typically determine the appearance of the HTML file on the screen in dependence upon the HTML tags. In general, a hyperlink provides a pointer to another file or Internet resource. Sometimes, a hyperlink can also point to a different location in a currently-displayed Web page. Within an HTML file, hyperlinks are identified by their syntax, for example:

Typically, the < . . . > structure identifies the HTML tags. The syntax typically includes a URL, which points to the other file, resource or location, and an anchor definition. In this case, the anchor is defined as a piece of text. In a Web page, typically a hyperlink is represented graphically on screen by the anchor. The anchor can be a piece of highlighted text or an image, for example a push-button or icon image. Where, for example, the anchor is non-textual, the underlying syntax usually also specifies a respective anchor image file location, which may be on the same or on a different server, as follows:

Where IMG SRC specifies the location of the image file for the anchor. The effect of a user selecting a hyperlink, by moving a pointer over the anchor and clicking, say, the mouse button, is normally that the Web browser attempts to retrieve a new Web page corresponding to the indicated URL.

However, sometimes a URL refers to a software process rather than to a Web page per se. In some browsers, for example Netscape Navigator™, when the pointer merely moves over a hyperlink anchor, the browser can be arranged to display the underlying URL in the status box of the display screen, irrespective of whether the user selects the hyperlink or not. Thus, a user can normally see the URL of any hyperlink in a Web page.

HTML files sometimes also include references to other files, for example, graphics files, which are retrieved by the browser and displayed as part of the Web page typically to enhance visual impact. Each reference comprises an appropriate HTML tag and a URL. In practice, the browser retrieves the requested Web page first and then retrieves other files referenced in this way by the Web page. Often, therefore, the textual portions of a Web page appear before the graphical portions.

A user is able to view the ASCII text source code of an HTML file using source code viewing facilities provided by some browsers. Thus, a user is able to view the URLs for any hyperlink or other imported file.

Generally, a user can retrieve a Web page using several methods which are supported by most browsers: by manually entering the URL into the location box112, by selecting a Bookmark (the stored URL of a previously-accessed Web page), or by selecting a hyperlink in a displayed Web page108. The first two methods potentially allow a user to access any Web page or other resource file at any time.

The third method requires the user to first access a Web page that incorporate a hyperlink to the required Web page or image file before that Web page or image file can be retrieved. In certain circumstances, it would be desirable to limit access by the third method only.

Since, however, a user can normally see any URL embedded in an HTML file and can access a Web page by entering the respective URL directly into a browser, under normal circumstances a service provider has little control over which Web pages are accessed and how they are accessed.

Many servers are arranged to address this problem by employing access tables, which include table entries controlling which users can access which pages.

An alternative measure, which is widely used, is to employ user identification and password protection to protect certain files on the server. Both measures are open to some degree to “spoofing” by unauthorized persons who have been known to masquerade as an authorized user by, for example, intercepting and cracking passwords for these protected files. A further disadvantage of both measures is the management overhead of keeping access tables or password files up-to-date, particularly where large numbers of users and/or pages are involved, or where the authorized user population changes regularly. Also, even if Web page access is controlled using access tables or password protection, a service provider normally has no control over the order in which an authorized user can access the Web pages once the URLs are known.

There have been some attempts to address these issues. For example, in PCT Patent Application No. 98/32066 to McGee, the contents of which are herein incorporated by this reference in their entirety, an Internet server employs a session manager that intercepts all incoming requests from clients for Web pages. Each request incorporates a token that is compared by the session manager with tokens, which are stored in a session database. Tokens in the database have a corresponding real URL. When a token in the database is found that matches the received token, the real URL is used to retrieve the Web page(s) associated with the URL. One drawback to using tokens, each of which has a corresponding real URL, is that the token may be stolen or used by an unauthorized party to access contents of the Web page associated with the token. The contents of the Web page are potentially compromised in the event that the token is compromised. This means that Web pages with sensitive data may be subject to unauthorized access without the Web server ever knowing that unauthorized access has occurred.

SUMMARY

Embodiments of the present invention are directed generally to the use of a URL masking device, system, and method. A masked URL is used to enhance web security associated with applications and other web content that can be accessed through use of a URL.

In one embodiment, the present invention is directed to a method. The method includes the steps of:

(a) receiving Web content comprising a first Uniform Resource Locator (URL) in a first Web session;

(b) determining a first set of parameters comprising one or more parameters which will be used to mask the first URL, the first set of parameters corresponding to the first session and being substantially unique to the first session;

(c) masking the first URL using the first set of parameters thereby creating a first masked URL;

(d) replacing the first URL with the first masked URL in the Web content, thus resulting in an altered Web content comprising the first masked URL; and

(e) distributing the altered Web content generally over an untrusted network to at least one client.

As used herein a “session” corresponds to a predetermined amount of time or a period of time between client requests. Typically, a session is defined as the period of time when a client is connected with a particular server. The connection may be freely given, or may require some sort of password verification to initiate a session. In the event that the server is a Web server, then the session is referred to as a web session. However, in accordance with at least some embodiments of the present invention, a number of sessions may occur during the same connection between a client and a server. For example, a first session may end when a user begins to view new Web content from the same server and/or during the same log in. After the first session ends a second different session begins where a particular URL may be masked in a different way than it previously was.

A particular URL may occur several times in a given Web content. Each occurrence of the URL may be masked in a different manner than the other versions of the same URL. This will provide a higher level of security to the URL and its associated Web content.

As used herein “Web content” may be any type of electronic media that is viewable via a communication device like a computer, laptop, PDA, Blackberry™, cell phone, or the like. Examples of Web content include, but are not limited to, Web pages, HTML files, pdf documents, emails, videos, JPEGS, gifs and the like.

Also, as can be appreciated by one of skill in the art, embodiments of the present invention may be utilized on any reference character, image, or string that can be used to retrieve Web content. For purposes of illustration, the term URL is generally used herein to describe any electronically viewable and selectable reference to Web content.

A URL is generally masked to preserve some amount of security associated with its associated Web content and/or to deter fraudulent use of the URL. An unmasked URL allows any user to access relatively easily Web content that is referenced by the URL. On the other hand, a masked URL cannot be used to view Web content as easily. In accordance with at least some embodiments of the present invention, if an authorized client transmits a masked URL to a server requesting the associated Web content, the server first determines if an authorized client sent the URL, then the server determines if the URL is coming from a valid session. Thereafter, the server will unmask the URL and attempt to retrieve the associated Web content. If the URL has been altered in any way the server may not be able to properly unmask the URL, and will most likely not be able to retrieve the requested Web content.

These and other advantages will be apparent from the disclosure of the invention(s) contained herein. The above-described embodiments and configurations are neither complete nor exhaustive. As will be appreciated, other embodiments of the invention are possible utilizing, alone or in combination, one or more of the features set forth above or described in detail below.

DETAILED DESCRIPTION

The invention will be illustrated below in conjunction with an exemplary communication system. Although well suited for use with, e.g., a system utilizing a web server, the invention is not limited to use with any particular type of communication system server or configuration of such a server. Those skilled in the art will recognize that the disclosed techniques may be used in any communication application in which it is desirable to identify appearance differences in a customer that have occurred between times that the customer has initiated a contact.

The following description concentrates on the Internet Web service for the purpose of explanation only. The concepts described, however, are more broadly applicable to other Internet and intranet services and to other information services available from different communications networks.

Referring toFIG. 2, the logical flow of Web content including a URL will be described in accordance with at least some embodiments of the present invention. In the depicted embodiment, URLs and Web content (e.g., Web pages, HTML documents, emails, IP phone calls, Video calls, and other applications) are handled on a server side200. Specifically, when Web content is requested a URL will be at least shown in the location box112when presented to a client. Additional URLs may be located at various locations within the display area108. These URLs are generally retrieved from a database containing URLs and associated Web sites by a URL generator204(which is conventional). The Web content and the URL is forwarded to the URL modification module208. Here the URL is masked prior to being transmitted across an untrusted network212to a potentially untrusted person. Generally, the Web content and its associated masked URL(s) are targeted to a client216who happens to be connected to an untrusted network212.

Referring toFIG. 3, an exemplary communication system300will be described in accordance with at least some embodiments of the present invention. The communication system300comprises a communication network304providing a connection between a server308and a plurality of endpoints312. The server308is typically embodied as a Web server and is in communication with a database320.

The communication network304may be in the form of a LAN (Local Area Network) or a WAN (Wide Area Network) like the Internet. Generally, the communication network304is a packet-switched network operable to transmit information sent from one party for presentation to another.

The endpoints312may be any suitable apparatus used to view Web content over the communication network304. Examples of endpoints312include, but are not limited to, Personal Computers, laptops, cellular phones, Blackberries™, PDAs (Personal Digital Assistants), IP enabled telephones, Internet enhanced televisions, and the like. As will be understood, such endpoints typically access Web content using a Web browser or the like.

As can be appreciated by one of skill in the art, the server308may be any server that receives requests, whether direct or indirect from a remote client via the communication network, and executes instructions of that request via a processor implementing executable instructions stored in a memory of the server308and/or the database320. The requests can be in the form various application layer protocols including, for example, http SOAP (Simple Object Access Protocol), Java RMI (Remote Method Invocation), DNS (Domain Name Server), TLS/SSL (Transport Layer Security/Secure Sockets Layer), TFTP (Trivial File Transfer Protocol), FTP (File Transfer Protocol), IMAP (Internet Message Access Protocol), IRC (Internet Relay Chat), NNTP (Network News Transfer Protocol), POP3 (Post Office Protocol version 3), SIP (Session Initiation Protocol), SMTP (Simple Mail Transfer Protocol), SNMP (Simple Network Management Protocol), SSH (Secure Shell), TELNET, BitTorrent, RTP (Real-time Transfer Protocol), SCTP (Stream Control Transmission Protocol), or various transport layer protocols including, for example, TCP, UDP (User Datagram Protocol), and the like.

The server316further comprises a URL manager316. The URL manager316generally comprises the URL generator204and the URL modification module208. The URL manager316acts as a buffer between the server and the communication network304. In other words, the URL manager316analyzes and edits incoming and outgoing Web content and any URL associated with the subject Web content. A URL may be embedded somewhere within the middle of a Web page, and the URL manager316is operable to locate the embedded URL and mask/unmask the URL depending upon the nature of the request.

In the sending mode, the URL manager316analyzes and edits Web content that is intended for delivery to a client216associated with at least one of the endpoints312. The URL manager316scans the Web content searching for URLs and when any URL is located, the URL manager316is operable to mask the URL within the Web content.

A masked URL is generally pseudo-randomly masked prior to being distributed to a client216. The parameters used to mask the URL are retained in an erasable memory that is part of the URL manager316. This way, when the client216selects a URL, the masking parameters can be referenced and the URL manager316unmasks the masked URL. The unmasked URL is sent to other functionality within the server208such that Web content relating to the selected URL is retrieved and subsequently sent to the client216, after URL(s) within the new Web content have been masked of course.

Referring now toFIG. 4, variances of a URL between sessions will be described in further detail in accordance with at least some embodiments of the present invention. A particular URL408ain a first session404amay be masked using a first set of parameters as noted above. Assume for example that the subject Web content being displayed to and navigated by a particular client216is a secure business site showing quarterly financial numbers for a certain company. In the past, URLs appearing in either the location box112and/or the display area108were not necessarily masked. This allowed the navigating, supposedly permitted client216, to freely view the URL. The client216would then be able to possibly change the URL, i.e. modify a portion of the URL contents, and enter the modified URL into the location box112in an attempt access other Web content to which he or she may or may not be permitted. Additionally, the client216would have been able to send the URL to a “friend” either via email or some other medium. The friend would then be able to access the same Web content that the permitted client216was allowed to view, whether the friend is permitted access to such Web content or not.

In accordance with at least some embodiments of the present invention, a masked URL substantially precludes a client216from altering a URL in order to gain access to other Web content to which he/she is not permitted access. Additionally, utilizing a masked URL substantially precludes a client216from forwarding the URL on to a friend in an attempt to allow the friend access to the same Web content if such access is not permitted. One way a masked URL precludes such activity is by enabling the URL with a deactivation element. The deactivation element may be implemented as a timing-out mechanism that changes at least a portion of the URL after a predetermined amount of time. After at least a portion of the masked URL has been changed due to the activation of the timing-out mechanism, the URL manager316will not be able to accurately unmask the URL and therefore access to Web content associated with the URL will be denied. Alternatively, each masked URL may have selected time-to-live, after which it is removed from the map of URLs and their corresponding masks.

Additionally, the URL may be enabled with an activation sensitive element (e.g., a counter) that counts or otherwise has a value that depends on the number of actions performed by a client216during his/her navigation of the Web content associated with a particular URL. For example, every time the client performs a mouse click, the masked URL will change based on some parameter, preferably a time-based parameter (such as those above) or some other parameter that the server is operable to monitor. The monitoring operation may be done by an applet downloaded by the server to the client. The monitored operation results may be returned to the server when the monitored client forwards messages (e.g., content requests to the server.) The session may change every time the client216performs any predefined action. Thus, in the second session404b, after the first masked URL408achanges form to a second masked URL408b, the URL manager316registers a change in sessions and updates the parameters used to unmask the second URL408b. Thus, authorized actions performed by an authorized client216will change the masked URL but since the URL manager216is aware of the changes to the masked URL, the URL manager216can update parameters used to unmask the URL. The result of the URL manager216monitoring actions and updating URL unmasking parameters is Web content associated with the second masked URL408bcan still be accessed. However, if one of the actions performed by the client216includes an action that is not allowable (e.g., a “copy” and/or “paste” function was executed), then the URL manager216may not update the unmasking parameters rendering the second masked URL408buseless. As can be seen inFIG. 4, the URL may be masked the up to N times resulting in408N, if N events occur, where N is typically greater than or equal to one. In the event that each of the actions causing the masked URL to change was an allowable action, then the server308may still recover Web content associated with the masked URL408N in the Nth session404N.

A URL may be masked in a number of different ways between different sessions and based upon different actions. Part of the original masking operation of the URL may include enabling the URL with an activation sensitive element as noted above. The operation of the activation sensitive element is enabled by the URL manager and therefore known by the URL manager. After a particular action is performed, the masked URL may be masked according to a new set of parameters (e.g., subject matter surrounding the original URL in the Web content). For example, if the original URL was masked based upon the first four words immediately preceding the URL in the Web content resulting in a first masked URL, then after a first action, the first masked URL may be further masked according to the first four words immediately succeeding the URL in the Web content. The result will be a second URL that is twice masked. If the first action was an allowable action, then the URL manager316updates the masking parameters and knows that if the second URL is received it will need to be unmasked using the first four words immediately succeeding the URL then the resulting URL will need to be further unmasked using the first four words immediately preceding the URL. After the URL has been successfully unmasked the Web content associated with the twice-masked URL can be transmitted to the client216.

Another way to provide security to the masked URL is to include known parameters of the client's endpoint312in the masking operation. For example, the IP address of the requesting authorized endpoint312and an identification number of the subject endpoint312may be used. The URL manager316may require this identification information to be sent along with a URL request prior to providing the endpoint312Web contents associated with the URL.

Referring now toFIG. 5, a method of preparing Web content for transmission to a client will be described in accordance with at least some embodiments of the present invention. The method is initiated upon receipt of a request for Web content by the server308(step504). Thereafter, the server308determines whether user authentication is required to view the requested Web content (step508). In other words, the server308determines if the requested Web content is password protected or the like. In the event that access to the requested Web content is restricted then the server308will initiate some sort of identity verification procedure (step512). This step may include requiring the requesting client (“requester”) to input a password or provide some other sort of verification of his/her identity. In step516, it is determined whether the identity of the requestor has been verified. If the identity of the requestor was not verified in step516, then the method returns to step504and waits for another request for the web content. Alternatively, the requestor may be presented with another chance to verify his/her identity to the server308. If the requestor has been able to verify his/her identity to the server308or no authentication was required to view the requested Web content, then the requested Web content is retrieved typically from a Web content database which may be a part of database320or may be in the form of memory within the server308.

The URL manager316typically scans the retrieved Web content for URLs and other references to different Web content (step524). The Web content may be scanned for typical indicators of references to other Web content including instances of “www.” or “@yahoo” or “.com/.org/.gov” and so on. In step528it is determined if any URL(s) were found during the scanning step. In the event that one or more of these common indicators are found, hence some URL(s) may exist in the Web content, then the method continues to step532where masking parameters are determined.

During a first session, a first set of masking parameters may be used that are made up of at least one chosen parameter. For example, assume that there exist five different eligible parameters (e.g., first twelve characters before the URL, first twelve characters after the URL, free disk space in the server, number of files being accessed by the server, and server identification number) that could be used to mask a given URL. Based on the time that the request for the Web content was received, i.e. the request was received at the third second of a given minute, the first and third parameters may be chosen. During a second session, a second set of masking parameters may be selected from the same five eligible parameters to mask a given URL. Again the parameters that are selected could be based upon the time the request for Web content was received. However, the time associated with the second session will most likely differ from the first time. For example, the second session may have been requested at the fortieth second of a given minute, this may result in the second, third, and fifth parameters being used to mask the URL. Consequently, a single URL may be masked differently between sessions. Furthermore, in the event that the same URL appears multiple times in Web content, each instance of the URL may be masked differently, especially if one or more of the parameters used to mask the URL depend on content surrounding the subject URL. This way a common URL will not be as easily discovered. As can be appreciated by one of skill in the art, the more eligible parameters that are made available to the URL manager316to mask URLs, the more secure the masked URL and the contents referenced by the URL will be.

Once the masking parameters have been determined, the URL manager316masks each URL using the determined masking parameters (step536). Subsequently, the URL manager316will replace the original URL(s) with the masked version of the URL(s) in the Web content (step540). Of course, it may not be necessary to mask each and every URL that appears in Web content. Rather, only selected URLs will need to be masked and replaced with a masked URL. Some URLs may be referencing highly sensitive material that requires a higher level of security than some other URL. In this case, the URL manager316may mask the URL referencing the sensitive material, whereas the URL referencing less sensitive material may not be masked. After the URL(s) in the Web content have been sufficiently masked and replaced, then the altered Web content is transmitted to the requester for display on his/her endpoint312(step544).

As can be appreciated, URLs may appear in both the location box112and/or the display area108. Therefore the URL manager316will scan both of these locations and appropriately mask any URLs that show up in the Web content. Typically, the URL in the location box112will be masked so that it cannot be deceitfully used by the client216or intercepted and used by an unauthorized third party. Likewise, the URL(s) that appear in the display area108or any other portion of the Web content for that matter can be masked and replaced with a masked URL if the URL requires such treatment.

Referring now toFIG. 6, a method of handling a masked URL will be described in accordance with at least some embodiments of the present invention. The method begins when a masked URL is received by the server308(step604). In step608, the received URL is parsed by the URL manager316. Typically in the parsing step, the URL manager316separates the session identification information from the masked URL from the rest of the URL. When a URL is masked it is generally given a session identification number as a part of the masking operation. This session identification number is extracted by the URL manager316(step612). The session identification number is used to verify the validity of the URL along with the validity of the requestor of the URL. The session identification number will usually change when it is passed from one client to another client. If the URL was not allowed to be exchanged between clients the session identification number will change, thus when the URL manager316receives the URL with a different session identification number, the URL manager316can verify that the URL has been exchanged.

In step620it is determined if the session identification number is valid. If the session identification number is not valid, i.e. the URL has been exchanged, time has expired in the session, or some other unauthorized action has been performed on the URL, then the method continues to step628to determine if the session expired. If it is determined that the session has expired then the static information relating to the session along with any cookies in the server308are erased in step632. If the session has not yet expired, then the client may be given another chance to request Web content associated with the URL and the method returns to step616to recheck the session identification number of the URL. If the session identification number was verified in step620, then the method continues to step624where additional masking parameters are determined. The masking parameters are typically unique to each URL and each session. Therefore, a memory of the masking parameters for a single session is maintained in the URL manager316. The URL manager316maintains masking parameters information in a readily erasable memory rather then maintaining the information in a database320.

Once the URL manager316determines the parameters that were used to masked the received URL, then the URL manager is operable to unmask the URL using the parameters in an operation that is the inverse of the operation used to mask the URL (step636). The server308uses the unmasked URL to recover the corresponding Web content (step640). The URL manager316then scans the requested Web content to determine if any URLs are in the requested Web content (step644). Thereafter, the method proceeds back to step528where it is determined if any URLs were found and the method continues as described in reference toFIG. 5.

Referring now toFIG. 7a method of enabling a URL to expire will be described in accordance with at least some embodiments of the present invention. Initially, in step704, a time threshold for a timing-out mechanism is determined. The time threshold corresponds to the amount of time a given session is allowed to persist without any actions before the session is terminated. The time threshold may be a small as a number of seconds or may be as large as a number of days depending upon the application and session particulars.

Once the time threshold for the timing-out mechanism has been determined, a URL is enabled with the timing-out mechanism (step708). A masked URL is typically enabled with the timing-out mechanism, although an unmasked URL may be enabled with the timing-out mechanism as well before it is provided to a client. The URL with the timing-out mechanism is then transmitted to the client typically as a part of Web content, either in the location box112and/or the display area108.

When the URL has been transmitted to the client216an elapsed time variable is initialized and set equal to zero (step716). The server308then monitors the client216and as the client216is monitored, the server308determines how much time has elapsed since the URL was initially sent to the client216(step720). The amount of time that has elapsed for a particular session may correspond to how long a single Web content has been viewed or may correspond to the amount of time between client actions (e.g., mouse clicks, key strokes, commands, and the like). In step724, it is determined if the elapsed time for the given session has exceeded the time threshold. If the time threshold has been exceeded by the elapsed time then the session is considered terminated and the URL is masked such that the URL manager316cannot properly unmask the URL. In an alternative embodiment, the URL may not necessarily be masked when the time threshold expires. Rather, the masking parameters that were originally used by the URL manager316to mask the originally transmitted URL may be altered or cleared from the URL manager's316memory.

Referring now toFIG. 8, a method of enabling a URL to expire upon the occurrence of an unauthorized activity will be described in accordance with at least some embodiments of the present invention. Initially, in step804, the URL manager316determines authorized activities that may be performed either during a session or on a particular URL. Examples of authorized activities include, but are not limited to, selection of a URL, certain key strokes, navigation of a particular Web content or a number of Web contents, and the like. Excluded from the list of authorized activities are generally any unauthorized activities. Examples of unauthorized activities may include, but are not limited to, executing a “copy” and/or “paste” function, highlighting a URL, navigating to restricted Web content, and so on. As can be appreciated, a list of unauthorized activities may be determined and any activity that does not appear in the list of unauthorized activities may be considered an authorized activity. This may provide an easier way to implement generating a list of authorized activities, especially if the list of unauthorized activities is relatively small compared to the number of authorized activities.

Once authorized activities have been determined then a URL is enabled with an activity sensitive mechanism (step808). The URL that is enabled with the activity sensitive mechanism may be a masked URL or may be the original version of a URL depending upon the sensitivity of the URL and its associated Web content. The activity sensitive mechanism is operable to change how the URL is masked. Generally, the activity sensitive mechanism is a list of predetermined masking operations, where each masking operation changes how the URL is masked and may use different masking parameters. The URL manager316maintains a list of the same predetermined masking operations. Therefore, if the activity sensitive mechanism is engaged and the URL masks itself, the URL manager316will be able to know how the URL was masked and may subsequently unmask the URL if requested to do so. The activity sensitive enabled URL is then transmitted to a client216(step812). Thereafter, the URL manager316monitors the client216and his/her performed actions (step816).

In step820, it is determined if a client activity has occurred. If no client activity has occurred, then the method returns to step816and the URL manager316continues to monitor the client216. However, if an activity has occurred then the URL changes how it is masked, typically according to some predetermined parameters in a predetermined fashion (step824). Thereafter, the URL manager316determines if the activity was an authorized activity (step828). If the action performed was not an authorized activity, then the method ends in step836. This means that the URL has changed the way it is masked but the URL manager316has not updated its records of the masking parameters for the newly masked URL. Thus, if that particular URL is requested at a later time, the URL manager316will not be able to properly unmask the URL rendering the URL useless and the Web content associated with the URL inaccessible. If the action performed did correspond to an authorized activity, then the URL manager316will update its masking records to reflect the new masking of the URL (step832). This way if a client216requests Web content associated with the newly masked URL, the URL manager316can unmask the URL and retrieve the associated Web content.

Referring now toFIGS. 9A and 9Ba list of masking parameters will be described in accordance with at least some embodiments of the present invention. The first session masking parameter container904comprises a static parameters field908, a transient parameters field912, and a masking parameters field916. The parameters that are typically in the static parameters field908are user identifier and session identifier. The user identifier is generally unique to a particular user and the session identifier is unique to the current session. In the event that the session changes due to the occurrence of an event or the like, the session identifier may be updated.

The parameters in the transient parameters field912typically include parameters that vary over time, or at least may vary depending upon network conditions. Examples of parameters that can be found in the transient parameters field912include time-based parameters (e.g., time that a client requested a particular Web content, time that content was provided to the client, and/or any time associated with a particular action or event), system/server transient information (e.g., server identification number, number of processes currently being employed, free disk space in the server, file being accessed by the server, number of high priority processes, number of files open on a system connected to the server, CPU's usage information, etc.), or Web content information (e.g., number of characters in a word that immediately precedes the URL, number of characters in a word that immediately succeeds the URL, number of words/characters in a given line of the Web content, etc.).

When a request for Web content containing a URL is received at the URL manager316, the URL manager may use a sub-set of the static and/or transient parameters to determine what masking parameters should be used to mask a given URL. For example, at the time of a first request during a first session, the request time may correspond to the second half of a minute and based on that determination, the URL manager316may decide to use four masking parameters, for example, server free disk space, CPU usage information, server ID number, and request time populate the masking field916. Each of the values for these parameters may be inputs to the masking algorithm employed by the URL manager316such that the URL is masked in a substantially unique way for the given session. On the other hand, if the request during the first session was received some time during the first half of the minute, the URL manager316may decide only to use three masking parameters, and those parameters may not necessarily coincide with the parameters that were chosen based on the request being received during the second half of the minute.

Of course, the next time a request is received the same rules for selecting masking parameters may not be followed by the URL manager316. For example, the URL manager316may not even use the request time to determine what masking parameters should be used. Rather, the URL manager may simply use the free disk space to determine how many and what masking parameters should be used to mask the URL. Based on the free disk space, the masking parameters in the masking field920selected during a second session may include the number of characters in a word next to the URL, the number of high priority processes being processed by the server, and the requestor's IP address. As can be appreciated, some of the masking parameters used during the first session may also be used during the second session. In the event that some of the reused parameters are transient, the values of those parameters may not necessarily be the same in the first session as they are in the second session.

In an alternative configuration, a queue of masking parameters may be employed. The queue of masking parameters may include those potential masking parameters discussed above, whether transient or static. Also, the static and/or transient parameters may be used to select a number of masking parameters from the masking parameter queue. For example, there may be twelve masking parameters in the masking parameter queue. When a request for Web content containing a URL is received, the URL manager316may use one or more of the static and/or transient parameters to determine how many masking parameters should be chosen from the masking parameters queue to mask the URL. The URL manager316may decide that two masking parameters will be used because the word next to the URL has two characters or the number of characters in the word next to the URL is divisible by two. Based on this, the URL manager316only needs to select the first two masking parameters from the queue. In the event that the number of characters in the word next to the URL was divisible only by three, the URL manager316may have decided to choose three masking parameters instead of two. Once the URL manager316has decided what masking parameters will be used to mask the URL, it only needs to determine the values of the masking parameters for the input to the masking algorithm. An advantage to implementing a masking parameter queue is that the type of masking parameters may be predetermined but kept secure by the URL manager316. This provides for a relatively easy way for the URL manager316to keep track of what parameters and values were used to mask a given URL, thus making it easier for the URL manager316to unmask the URL. Furthermore, the URL manager316does not have to continually reference a table containing a list of tokens to real URLs, rather the URL manager316only needs to maintain the queue of potential masking parameters and used masking parameters so that masked URLs can be properly unmasked and the Web content related to the URL can be retrieved.

Referring now toFIG. 10a method of selecting masking parameters will be described in accordance with at least some embodiments of the present invention. Initially the URL manager316receives a request for Web content with a URL (step1004). Thereafter, the URL manager316references a table of possible masking parameters (step1008). As noted above, the table of possible masking parameters may include a masking parameters queue or may simply be based on a predetermined masking parameters selection algorithm using static and/or transient session information. Using the static and/or transient session information, the URL manager316determines the masking parameters that will be used to mask the given URL, typically from a masking parameters queue or a masking parameters selection algorithm (step1012).

Once the masking parameters have been selected, the URL manager316either determines directly the values for the masking parameters or queries the server308for values of the masking parameters (step1016). The URL manager316may not necessarily need to query the server for static parameters like user identifier and session identifier, or other transient parameters like time-based parameters or Web content based parameters. However, the URL manager316may need to query the server308for server based transient masking information. The URL manager316then receives the requested values for the masking parameters from the server (step1020). Thereafter, the URL manager316uses the values of the selected masking parameters to mask the given URL prior to its transmission to the endpoint312(step1024). As can be appreciated, the number of parameters used to mask a given URL may be any number greater than one. Furthermore, static parameters are generally used, typically in conjunction with other selected transient masking parameters, to mask a given URL. Specifically, the user identifier and/or session identifier are used for masking a URL to ensure a certain level of security surrounding the masked URL, and to help deter any unauthorized access to Web content associated with the masked URL.

Moreover, the disclosed methods may be readily implemented in software that can be stored on a non-transitory computer-readable medium, and executed on programmed general-purpose computer with the cooperation of a controller and memory, a special purpose computer, a microprocessor, or the like.