WO2014117687A1

WO2014117687A1 - Method and device for displaying web address safety evaluation information

Info

Publication number: WO2014117687A1
Application number: PCT/CN2014/071411
Authority: WO
Inventors: 朱玫; 吴浩; 任寰
Original assignee: 北京奇虎科技有限公司; 奇智软件（北京）有限公司
Priority date: 2013-02-01
Filing date: 2014-01-24
Publication date: 2014-08-07
Also published as: CN103118026A; CN103118026B

Abstract

Disclosed in the present invention is a method for displaying web address safety evaluation information, comprising: sending, with respect to a web page currently loading, a user-triggered request for safety evaluation information; receiving from the server side, in response to said safety evaluation information request, web address safety evaluation information pertinent to the web page currently loading; displaying said web address safety evaluation information on a browser. Use of the present invention can enhance network browsing safety. Also disclosed is a corresponding device.

Description

Method and device for displaying URL security identification information

The present invention relates to the field of network applications, and in particular, to a method and apparatus for displaying web site security authentication information. Background technique

Users often encounter malicious websites while browsing the web. What is a malicious website? When a web user browses some pornographic or other illegal websites, or downloads games or other programs from an insecure site, the malicious programs are often brought into their own computers, and the users themselves are unaware of this. Until a malicious advertisement keeps popping up or a pornographic website automatically appears, the user may find that the computer is "poisoned". During the period when malware is not discovered, all sensitive information on the user's network may be stolen, such as bank account information, credit card passwords, etc. These websites, where the victim's computer keeps popping up pornographic websites or deliberately spreading malicious advertisements, are called malicious websites, and they are not popular.

In other words, malicious websites refer to malicious programs such as Trojans, viruses, and other malicious programs on the website. The "pretending website service content" induces users to visit the website. Once they enter these websites, they will trigger the Trojans and viruses planted in the website. Such programs cause the visitor's computer to be infected, and are at risk of losing account or privacy information. Malicious websites are prone to appear in some unknown websites with sales and referrals.

The prior art usually uses a network shield to protect the website. Net Shield is a commonly used Internet protection software that can prevent various risks that users may encounter during the Internet access process. It effectively intercepts Trojan websites and fraudulent websites, automatically detects the files you download, and promptly removes viruses. It also has a browser lock. , homepage lock, one-click repair browser and other functions, so that the browser is always in the best state, to prevent problems before they occur, protect your computer and personal property from malicious websites.

However, the assessment of the security information of the access URL in the network shield is mainly the blacklist and whitelist technology, and it is impossible to provide security-related information. Summary of the invention

In view of the above problems, the present invention has been made in order to provide a method of displaying web site security authentication information and corresponding apparatus for displaying web site security authentication information that overcomes the above problems or at least partially solves the above problems.

According to an aspect of the present invention, a method for displaying web site security authentication information is provided, including: transmitting a security authentication information acquisition request triggered by a user for a currently loaded page;

Receiving, by the server side, the URL security authentication information of the current loading page returned in response to the security authentication information obtaining request; The URL security authentication information is displayed on the browser side.

Optionally, the website security authentication information is a security information weight generated by a security authentication performed on a URL corresponding to the currently loaded page according to at least one of the following parameters:

Blacklist, whitelist, number of independent visitor visits, server location, registration time, domain name, IP address, registrant, payment page, web page structure characteristics; wherein different parameters correspond to different security information weights.

Optionally, the weights of different parameters in the web site security authentication information are adjustable.

Optionally, the sending, by the user, the security authentication information obtaining request for the currently loaded page, includes:

Loading the security authentication button in the address bar of the currently loaded page;

When the user clicks the security authentication button, the security authentication information acquisition request is received and sent. Optionally, after the sending the security authentication information obtaining request, before receiving the webpage security authentication information of the current loading page returned by the server side, the method further includes: uploading the URL of the currently loaded page and/or the URL resolution IP to the Server side.

Optionally, the method further includes: uploading, by the MID of the terminal where the browser that loads the current page is located, to the server side;

Receiving the URL security authentication information of the currently loaded page, where the server side uniquely determines to return the URL security authentication information of the currently loaded page to the terminal according to the MID.

Optionally, displaying the URL security authentication information on the browser side includes:

Loading a display interface on the current loading page, displaying the authentication process information on the current page by using the display interface, and displaying the URL security identification information on the display interface after the identification is completed;

In the authentication process, if the display interface is closed, the identification process is continued, and when the display interface is opened again, the website security identification information is displayed.

Forming the URL security authentication information by using a combination of any one or more of a credibility value, a color, and a prompt;

The obtained URL authentication information is displayed on the browser side.

Optionally, when the current loading page is a payment page,

Match the content of the currently loaded page with the content of the webpage of the malicious URL;

According to the matching result, the URL security identification information of the currently loaded page is obtained.

Optionally, the matching the content of the currently loaded page with the webpage content of the malicious webpage comprises: performing D0M tree identification on multiple points in the currently loaded page content;

Select the structural features in the DOM tree of the currently loaded page, and the structural features of the DOM tree with the malicious URL Matching;

If it matches, it confirms that the currently loaded page is a malicious webpage, and obtains a credibility value corresponding to the malicious web address as at least a part of the webpage security authentication information.

Displaying the URL security authentication information in the URL information display window; or

Receiving the click instruction input by the user on the website, and displaying the website security identification information in the website information display window.

Optionally, the foregoing method further includes:

And if the user is dissatisfied with the web site security authentication information, receiving error correction information input by the user, where the error correction information includes a credibility value recognized by the user for the web address.

Optionally, the foregoing method further includes:

If the URL security authentication fails, the authentication failure information is displayed to the user on the browser side, and the user is prompted whether to retry, and the subsequent operation is performed according to the instruction of the user.

Optionally, the method is implemented in the form of a plug-in embedded in a browser.

Optionally, when the plugin appears in the address bar of the browser in the form of a button,

Receiving a click operation of the user on the button, triggering the security authentication information acquisition request. According to another aspect of the present invention, an apparatus for displaying web site security authentication information is provided, including: a sending module, configured to send a security authentication information acquisition request triggered by a user for a currently loaded page;

The receiving module is configured to receive the web site security authentication information of the current loading page returned by the server side in response to the security authentication information obtaining request;

The display module is configured to display the URL security authentication information on the browser side.

Optionally, the sending, by the user, the security authentication information acquisition request for the current loading page, the sending module is further configured to include:

When the user clicks the security authentication button, the security authentication information acquisition request is received and sent. Optionally, the sending module is further configured to upload a URL and/or a URL resolution IP of the currently loaded page. To the server side.

Optionally, the sending module is further configured to upload the MID of the terminal where the browser that loads the current page is located to the server side;

The receiving module is further configured to receive the webpage security authentication information of the currently loaded page, where the server side uniquely determines to return the webpage security authentication information of the currently loaded page to the terminal according to the MID.

Optionally, the display module is further configured to:

The obtained URL authentication information is displayed on the browser side.

Optionally, the display module is further configured to:

Optionally, the foregoing apparatus further includes:

The error correction module is configured to receive the error correction information input by the user if the user is not satisfied with the security authentication information of the website, where the error correction information includes the credibility recognized by the user for the website address value.

Optionally, the display module is further configured to: if the website security authentication fails, display the authentication failure information to the user on the browser side, and prompt the user to retry, and perform subsequent operations according to the instruction of the user.

Optionally, the device is embedded in the browser in the form of a plug-in.

The receiving module is further configured to receive a click operation of the user on the button, and trigger the security authentication information acquisition request.

According to still another aspect of the present invention, a computer program is provided, comprising computer readable code, when the computer readable code is run on a computing device, causing the computing device to perform according to any of the above A method of displaying URL security authentication information.

According to still another aspect of the present invention, a computer readable medium is provided, wherein a computer program as described above is stored. The beneficial effects of the invention are:

In the embodiment of the present invention, for the currently loaded page (whether or not it is a blacklist or a URL recorded in the whitelist), when the user triggers the security authentication information acquisition request, the request is sent out. The URL security authentication information of the current loading page returned by the subsequent receiving server side in response to the security authentication information obtaining request, and then the obtained information is displayed on the browser side, so as to facilitate the user to know the security of the website being browsed. That is, in the embodiment of the present invention, the URL security authentication can be performed on any web address, and the user directly and intuitively understands the web site security authentication information of the currently loaded page, which helps the user to select whether to continue browsing the web address. If the obtained website security authentication information indicates that the website address is not trustworthy, the user may choose to close the website address, which greatly reduces the possibility that the user's information parameters (such as privacy information, account information, etc.) are acquired by the untrusted website, thereby improving the network. The security of browsing.

The above description is only an overview of the technical solutions of the present invention, and the technical means of the present invention can be more clearly understood, and can be implemented in accordance with the contents of the specification, and the above and other objects, features and advantages of the present invention can be more clearly understood. Specific embodiments of the invention are set forth below. DRAWINGS

Various other advantages and benefits will become apparent to those skilled in the art in the <RTIgt; The drawings are only for the purpose of illustrating the preferred embodiments and are not intended to limit the invention. Throughout the drawings, the same reference numerals are used to refer to the same parts. In the drawing:

1 is a flow chart showing a method of displaying web site security authentication information according to an embodiment of the present invention;

2 shows a schematic diagram of a security authentication button in accordance with one embodiment of the present invention;

3 shows a schematic diagram of another security authentication button in accordance with one embodiment of the present invention;

4 is a schematic diagram showing an inquiry of a security authentication operation according to an embodiment of the present invention; FIG. 5 is a schematic diagram showing a display interface display being authenticated according to an embodiment of the present invention; FIG. The web site security authentication information according to an embodiment of the present invention is a schematic diagram of a display interface with higher credibility;

7 is a schematic diagram showing a URL security authentication information as a display interface with low credibility according to an embodiment of the present invention;

FIG. 8 is a schematic diagram showing a URL security authentication information as a generalized display interface according to an embodiment of the present invention; FIG.

Figure 9 is a diagram showing error correction according to an embodiment of the present invention; Figure 10 is a diagram showing the success of a submission in accordance with one embodiment of the present invention;

Figure 11 shows a schematic diagram of authentication failure in accordance with one embodiment of the present invention;

Figure 12 is a diagram showing another authentication failure in accordance with one embodiment of the present invention;

Figure 13 is a diagram showing the structure of an apparatus for displaying web site security authentication information according to an embodiment of the present invention;

Figure 14 is a block diagram schematically showing a computing device for performing a method of displaying web address security authentication information in accordance with the present invention;

Fig. 15 schematically shows a storage unit for holding or carrying program code for implementing the method of displaying URL authentication information according to the present invention. detailed description

The invention is further described below in conjunction with the drawings and specific embodiments.

The algorithms and displays provided herein are not inherently related to any particular computer, virtual system, or other device. Various general purpose systems can also be used with the teaching based on the teachings herein. According to the above description, the structure required to construct such a system is obvious. Moreover, the invention is not directed to any particular programming language. It is to be understood that the present invention may be embodied in a variety of programming language, and the description of the specific language is described above for the purpose of illustrating the preferred embodiments of the invention.

To solve the above technical problem, an embodiment of the present invention provides a method for displaying web site security authentication information. FIG. 1 is a flow chart showing a method of displaying web site security authentication information according to an embodiment of the present invention. Referring to Figure 1, the method includes steps S102 to S106.

Step S102: Send a security authentication information acquisition request that is triggered by the user for the current loading page. Step S104: Receive, by the server, the URL security authentication information of the current loading page that is returned in response to the security authentication information obtaining request.

Step S106: Display the received web site security authentication information on the browser side.

In the embodiment of the present invention, for the currently loaded page (whether or not it is a blacklist or a web address recorded in the whitelist), when the user triggers the security authentication information acquisition request, the request is sent out. The URL security authentication information of the current loading page returned by the receiving server side in response to the security authentication information obtaining request is displayed, and the obtained information is displayed on the browser side to facilitate the user to know the security of the website being browsed. In the embodiment of the present invention, the URL security authentication may be performed on any website, and the user directly and intuitively understands the website security identification information of the currently loaded page, which helps the user select whether to continue browsing the website. If the obtained website security authentication information indicates that the website address is not trustworthy, the user may choose to close the website address, which greatly reduces the possibility that the user's information parameters (such as privacy information, account information, etc.) are obtained by the untrusted website. Thereby improving the security of web browsing.

The URL security authentication information mentioned in the embodiment of the present invention is a security information weight generated by security authentication performed on at least one of the following parameters: a blacklist, a whitelist, and an independent Visitor access, server location, registration time, domain name, IP address, registrant, payment page, web page structure characteristics. Of course, in the specific implementation, various parameters include, but are not limited to, the specific items listed above. In the security authentication process, different parameters correspond to different security information weights.

The embodiment of the present invention provides a preferred parameter combination manner. In this example, a certain format is set for different security levels, for example, a format consisting of multiple digits and a spacer, and multiple English letters and spacers are used. Format and so on. The content represented by different numbers can be set during implementation. The content mentioned here has many meanings, including but not limited to the credibility of the URL, the content displayed on the web page, and so on.

Assuming a three-digit format, the first bit can be set to the main type (type), the second bit to the subtype (sub-type), and the third bit to the content (sc, which usually represents a dangerous content category). Among them, the first two digits indicate the danger level and the third digit indicates the dangerous content. If the URL is simpler, you can also use only the first two digits, and you don't need to classify dangerous content.

For example, the three-digit format, for example, 60-10-109, represents a fraudulent popup class, where the first 60 and the second digit 10 indicate that the URL has a certain risk, and 109 indicates the content type. Similarly, 60-10-108 can represent fishing advertising.

Now a specific example will be explained. In this case, the security authentication is first based on whether it is a new web address. If it is a new URL, a URL that has never been viewed before, it will be 15 points. If it is not a new URL, it will be judged based on other parameter information of the URL. In this example, seven parameters are listed, and the specific content of each parameter and the security information weight of each parameter are as follows.

It should be noted that the parameters in this example and the security information weights of the parameters are enumerated. In practical applications, the weights are adjustable and are not static.

To facilitate user operation, consider loading the security authentication button in the address bar of the current loading page. When the user clicks the security authentication button, the browser side can receive the security authentication information acquisition request and send it. 2 shows a schematic diagram of a security authentication button in accordance with one embodiment of the present invention. On the right side of the address bar in Figure 2, a circular mirror icon is displayed. The user clicks on the icon to issue a security authentication information acquisition request, which triggers subsequent security authentication operations. The specific shape and position of the icon may be determined on a case-by-case basis. For example, the icon may also be square. FIG. 3 shows a schematic diagram of another security authentication button in accordance with one embodiment of the present invention. In addition to the round and square shapes, the icons can also be triangular, polygonal, and other patterns, which are not limited. Similarly, the location of the icon can also be placed in other locations than the right side of the address bar, such as in the URL information display window (such as a website business card), or other locations in the current loading page that can be displayed to the user, preferably placed in the address bar. On the right side, it is a better reminder when the user operates the URL.

When the user clicks on the icon, the current loading page will pop up a display interface, which asks the user in the display interface whether it needs to perform security authentication on the currently loaded page, and provides two methods of "start detection" and "cancel". 4 shows a schematic diagram of an inquiry of a security authentication operation in accordance with one embodiment of the present invention. After the user clicks "Start Detection", the web site security authentication information acquisition request is initiated to the browser side.

The server side can accurately perform security authentication on the currently loaded page, and the browser side uploads the URL parameter of the currently loaded page to the server side. The higher frequency is the URL address, and / or the URL resolves the IP. If both are uploaded at the same time, to ensure security, you can use XOR with random numbers and perform BASE64 before uploading. It is worth noting that the URL parameters here include but are not limited to URL address and URL resolution IP.

For example, in order to ensure that the URL security authentication information can be accurately and uniquely returned to the terminal where the browser is located, the browser side can also upload the MID of the terminal where the browser that loads the current page is located to the server side. After the security authentication operation on the server side ends, the server side uniquely determines the URL security authentication information of the currently loaded page according to the MID to be returned to the designated terminal (that is, the terminal where the browser is located), and then the browser side can successfully receive the URL security of the currently loaded page. Identification information.

After receiving the URL security authentication information sent by the server side, step S106 is executed, and the website security authentication information is displayed on the browser side. The existing browser attaches great importance to the user experience. Therefore, the display interface is loaded on the current loading page, and the authentication process information is displayed on the current page by using the display interface. After the authentication is completed, the website security identification information is displayed on the display interface. That is, in addition to the final URL security authentication information, the display interface can also display the identification process information, for example, if it is being authenticated, or it is identified as 60%, or the bar progress is displayed, the user can clearly know the identification. To what extent, when is the result. FIG. 5 is a diagram showing a display interface display being identified, please wait a moment, according to an embodiment of the present invention. Some users choose not to pay attention to the authentication process, but only need to obtain the final result (website security authentication information). Then, during the authentication process, the user can choose to close the display interface. However, the display interface is closed and does not mean that the authentication process is closed. The authentication process will continue on the server side until the end of the authentication. When the interface to be displayed is opened again, the obtained URL security authentication information is displayed on the display interface. If the authentication is not completed and the display interface is opened again, the current authentication process information is displayed on the display interface.

The URL security authentication information can be displayed in multiple ways. For example, the prompt message can be displayed, and the URL corresponding to the currently loaded page is highly risky (ie, the reliability is low), and needs to be carefully accessed. Account, password, etc., or, suggest that the URL corresponding to the currently loaded page has certain risks. Do not enter information such as account, password, etc. (or the reliability), or prompt that the URL corresponding to the currently loaded page is a secure URL. You can rest assured to access, similar prompts (that is, high reliability). For example, the color can be used for display, for example, red-green color. When the display interface is red, the reliability of the currently loaded page is low. When the display interface is yellow or orange, the reliability of the currently loaded page is generally When the display interface is green, it indicates that the currently loaded page is highly trusted. For example, it is also possible to mark with a confidence value, for example, 0-59 means that the credibility is not high, 60-79 means that the credibility is general, and 80-100 means that the credibility is high. In actual display, one parameter or a combination of multiple parameters can be used.

For example, combined with the credibility value and color, you can set the following on the display interface:

Credibility value 0-59 shows red

Credibility value 60-79 shows orange

Credibility value 80-100 shows green

6-8 are schematic diagrams showing a display interface of web address security authentication information in accordance with one embodiment of the present invention. As can be seen from Figure 6-8, the display interface combines the two values of the credibility value and the prompt. Among them, the display box of credibility can also be painted in different colors. Figure 6 shows that the authentication result is higher in credibility and the display box is green. Figure 7 shows that the authentication result is lower in credibility and the display box is red. Figure 8 shows that the authentication result is credible and the display box is orange.

After the webpage security authentication information of the currently loaded page is displayed on the display interface of the browser side, the webpage security authentication information may be displayed in the webpage information display window, and the webpage security authentication information can be seen regardless of whether the user opens the webpage of the website. . It can also be displayed according to the user's trigger instruction, that is, receiving the click instruction input by the user on the website, and displaying the website security identification information in the website information display window.

In the process of web site security authentication, the malicious web address that is usually encountered is a phishing website pretending to be a payment website. Phishing websites usually pretend to be websites such as banks and e-commerce. The main hazard is to steal private information such as bank accounts and passwords submitted by users. The so-called "phishing website" is a kind of online fraud. It means that criminals use various means to fake the URL address of the real website and the content of the page, or use the leak on the real website server program. Holes insert dangerous HTML code into certain pages of the site to defraud private data such as user accounts or credit card accounts and passwords.

For the convenience of users, the phishing website is taken as an example for explanation. In this case, when the current loading page is a payment page, first check if it is a payment website. At this time, the content of the currently loaded page is matched with the content of the phishing website, and the URL security identification information of the currently loaded page is obtained according to the matching result. If they match, it proves that the current loading page is a phishing website. If it does not match, the website address of the loading page can be further analyzed.

There are several ways to match two URLs. A more effective way is to match the structural features of the DOM tree. Since the structural feature of the DOM tree of the webpage is certain, the DOM tree is identified for multiple points in the currently loaded page content, and the structural features in the DOM tree of the currently loaded page are selected, and the DOM tree of the phishing website is The structural features are matched. If they match, the current loading page is confirmed as a phishing website. For example, the fifth element in the third layer of the DOM tree of the currently loaded page has the class name "alipay", which is considered to be the structural feature of a phishing website corresponding to the Alipay website, according to the DOM tree structure. The match can determine that the webpage is a webpage of a phishing website. Subsequently, the obtained phishing website's credibility value is taken as at least a part of the web site security authentication information for the web address.

The phishing website provided here is only one example of a malicious website. The security authentication operation of the remaining malicious websites is similar to the security authentication operation for the phishing website, mainly to identify and match the content of the webpage (for example, the structural features of the DOM tree). For details, see the above, and I will not repeat them here.

The URL authentication information currently mentioned in the embodiment of the present invention is determined by the server side, and the user itself is judged and proactive. Therefore, the user may be dissatisfied with the received website security authentication information. At this time, the error correction information input by the user may be received on the display interface, where the error correction information includes a credibility value recognized by the user for the web address. Figure 9 shows a schematic diagram of error correction in accordance with one embodiment of the present invention. Among them, "URL to be corrected" and "Credit" are the default URL and reliability of the page before the jump, which cannot be edited. When the user clicks "change one", the verification code is replaced. After the user clicks "Submit Information", the integrity and correctness of the information input are verified. After the input is completed, a prompt for successful submission will pop up. Figure 10 is a diagram showing the success of a submission in accordance with one embodiment of the present invention.

In the identification process, there are two types of results, one is that the authentication is successful, and the other is the authentication failure. Therefore, if the URL security authentication fails, the authentication failure information is displayed to the user on the browser side, and the user is prompted to retry. Follow-up operations are performed according to the user's instructions. There are several reasons for authentication failure, for example, connection failure with the server side, network failure, connection timeout, connection failure with the cloud security center, and so on. Figures 11-12 illustrate schematic diagrams of authentication failures in accordance with one embodiment of the present invention.

Since the browser itself has a large number of execution actions, it does not affect the browser's own functions. Using the plugin, the ability to display URL security authentication information is integrated into the plugin and embedded in the browser. The use of plug-ins can increase the functionality of the browser side without affecting the stability and security of the system, and improve the security performance of the browser side when browsing the website.

Based on the same inventive concept, the embodiment of the present invention further provides an apparatus for displaying webpage security authentication information, which is used to implement the method for displaying webpage security authentication information in any of the above embodiments. FIG. 13 is a block diagram showing the structure of an apparatus for displaying web site security authentication information according to an embodiment of the present invention. Referring to Figure 13, the device for displaying the URL security authentication information includes at least:

The sending module 1310 is configured to send a security authentication information obtaining request triggered by the user for the currently loaded page;

The receiving module 1320 is coupled to the sending module 1310, and configured to receive the web site security authentication information of the current loading page returned by the server side in response to the security authentication information obtaining request;

The display module 1330 is coupled to the receiving module 1320 and configured to display the web site security authentication information on the browser side.

In a preferred embodiment, the web site security authentication information is a security information weight generated by a security authentication of a web address corresponding to the currently loaded page according to at least one of the following parameters:

In a preferred embodiment, the weights of the different parameters in the URL security authentication information are adjustable. In a preferred embodiment, the sending module 1310 is further configured to:

When the user clicks the security authentication button, the security authentication information acquisition request is received and sent.

In a preferred embodiment, the sending module 1310 is further configured to upload the URL of the currently loaded page and/or the URL resolution IP to the server side.

In a preferred embodiment, the sending module 1310 is further configured to upload the MID of the terminal where the browser loading the current page is located to the server side;

The receiving module 1320 is further configured to receive the web site security authentication information of the currently loaded page, where the server side uniquely determines to return the webpage security authentication information of the currently loaded page to the terminal according to the MID.

In a preferred embodiment, display module 1330 is further configured to:

Loading the display interface on the current loading page, displaying the authentication process information on the current page by using the display interface, and displaying the website security identification information on the display interface after the identification is completed;

During the authentication process, if the display interface is closed, the authentication process is continued, and when the display interface is opened again, the URL security authentication information is displayed. In a preferred embodiment, the display module 1330 is further configured to:

The web site security authentication information is formed by using a combination of any one or more of credibility values, colors, and prompts;

The obtained URL security authentication information is displayed on the browser side.

In a preferred embodiment, when the current loading page is a payment page, the content of the currently loaded page is matched with the content of the phishing website; and the URL security authentication information of the currently loaded page is obtained according to the matching result.

In a preferred embodiment, the DOM tree is identified for multiple points in the currently loaded page content; the structural features in the DOM tree of the currently loaded page are selected, and matched with the structural features of the DOM tree of the phishing website; , confirm that the current loading page is a phishing website.

In a preferred embodiment, display module 1330 is further configured to:

Display URL authentication information in the URL information display window; or

Receiving the click command input by the user on the web address, and displaying the web address security authentication information in the web address information display window.

In a preferred embodiment, the device for displaying the web site security authentication information further includes an error correction module 1340 configured to receive error correction information input by the user if the user is not satisfied with the web site security authentication information, where the error correction information includes The credibility value recognized by the user of this URL.

In a preferred embodiment, the display module 1330 is further configured to display the authentication failure information to the user on the browser side if the URL security authentication fails, and prompt the user to retry, and perform subsequent operations according to the user's instruction.

In a preferred embodiment, the means for displaying the web site security authentication information is embedded in the browser in the form of a plug-in to perform the corresponding functions.

In a preferred embodiment, when the plug-in appears in the address bar of the browser in the form of a button, the receiving module 1320 is further configured to receive a click operation of the user on the button to trigger a secure authentication information acquisition request.

The following beneficial effects can be achieved by the invention:

Numerous specific details are set forth in the description provided herein. However, it is understood that the embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures, and techniques are not shown in detail so as not to obscure the understanding of the description.

Similarly, the various features of the present invention are sometimes grouped together into a single embodiment, in the above description of the exemplary embodiments of the invention, Figure, or a description of it. However, the method disclosed is not to be interpreted as reflecting the intention that the claimed invention requires more features than those recited in the appended claims. Rather, as the following claims reflect, inventive aspects reside in less than all features of the single embodiments disclosed. Therefore, the claims following the specific embodiments are hereby explicitly incorporated into the specific embodiments, each of which claims as a separate embodiment of the invention.

Those skilled in the art will appreciate that the modules in the devices of the embodiments can be adaptively changed and placed in one or more devices different from the embodiment. The modules or units or components of the embodiments may be combined into one module or unit or component, and further they may be divided into a plurality of sub-modules or sub-units or sub-components. In addition to such features and/or at least some of the processes or units being mutually exclusive, any combination of the features disclosed in the specification, including the accompanying claims, the abstract and the drawings, and any methods so disclosed, or All processes or units of the device are combined. Each feature disclosed in the specification (including the accompanying claims, the abstract and the drawings) may be replaced by alternative features that provide the same, equivalent or similar purpose, unless otherwise stated.

In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features that are not included in other embodiments, and other features, combinations of features of different embodiments are intended to be within the scope of the present invention. Different embodiments are formed and formed. For example, in the following claims, any one of the claimed embodiments can be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in a software module running on one or more processors, or in a combination thereof. Those skilled in the art will appreciate that a microprocessor or digital signal processor (DSP) may be used in practice to implement some or all of the functionality of some or all of the components of the device for displaying web site security authentication information in accordance with embodiments of the present invention. . The invention can also be implemented as a device or device program (e.g., a computer program and a computer program product) for performing some or all of the methods described herein. Such a program implementing the present invention may be stored on a computer readable medium or may be in the form of one or more signals. Such signals may be downloaded from an Internet website, or provided on a carrier signal, or provided in any other form.

For example, FIG. 14 illustrates a computing device that can implement a method of displaying web address security authentication information in accordance with the present invention, For example, the client. The computing device conventionally includes a processor 1410 and a computer program product or computer readable medium in the form of a memory 1420. The memory 1420 may be an electronic memory such as a flash memory, an EEPROM (Electrically Erasable Programmable Read Only Memory), an EPROM, a hard disk, or a ROM. Memory 1420 has a memory space 1430 for program code 1431 for performing any of the method steps described above. For example, storage space 1430 for program code may include various program code 1431 for implementing various steps in the above methods, respectively. The program code can be read from or written to one or more computer program products. These computer program products include program code carriers such as hard disks, compact disks (CDs), memory cards or floppy disks. Such a computer program product is typically a portable or fixed storage unit as described with reference to FIG. The storage unit may have storage segments, storage spaces, and the like that are similar to the storage 1420 in the computing device of FIG. The program code can be compressed, for example, in an appropriate form. Typically, the storage unit includes computer readable code 1431', ie, code that can be read by a processor, such as, for example, 1410, which when executed by a computing device causes the computing device to perform each of the methods described above step.

"an embodiment," or "one or more embodiments" as used herein means that the particular features, structures, or characteristics described in connection with the embodiments are included in at least one embodiment of the invention. In addition, it should be noted that the phrase "in one embodiment" herein does not necessarily refer to the same embodiment.

It is to be noted that the above-described embodiments are illustrative of the invention and are not intended to limit the scope of the invention, and those skilled in the art can devise alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as a limitation. The word "comprising" does not exclude the presence of the elements or steps that are not in the claims. The word "a" or "an" preceding a component does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements and by means of a suitably programmed computer. In the unit claims enumerating several means, several of these means can be embodied by the same hardware item. The use of the words first, second, and third does not indicate any order. These words can be interpreted as names.

In addition, it should be noted that the language used in the specification has been selected for the purpose of readability and teaching, and is not intended to be construed or limited. Therefore, many modifications and variations will be apparent to those of ordinary skill in the art. The disclosure of the present invention is intended to be illustrative, and not restrictive, and the scope of the invention is defined by the appended claims.

Claims

Rights request

1. A method for displaying website security authentication information, including:

Send a request triggered by the user to obtain security authentication information for the currently loaded page;

Receive the security authentication information of the URL of the currently loaded page returned by the server side in response to the security authentication information acquisition request;

The website security authentication information is displayed on the browser side.

2. The method according to claim 1, wherein the website security authentication information is a security information weight generated by a security authentication of the website corresponding to the currently loaded page based on at least one of the following parameters:

Blacklist, whitelist, number of unique visitor visits, server location, registration time, domain name, IP address, registrant, payment page, web page structural characteristics; different parameters correspond to different security information weights.

3. The method according to claim 2, wherein the weights of different parameters in the website security authentication information are adjustable.

4. The method according to any one of claims 1 to 3, wherein said sending a user-triggered security authentication information acquisition request for the currently loaded page includes - loading a security authentication button in the address bar of the currently loaded page. ;

5. The method according to any one of claims 1 to 4, wherein, after sending the security authentication information acquisition request and before receiving the URL security authentication information of the currently loaded page returned by the server side, it further includes: The URL of the loaded page and/or the URL resolution IP are uploaded to the server side.

6. The method according to claim 5, further comprising: uploading the MID of the terminal where the browser loading the current page is located to the server side; and

Receive the URL security authentication information of the currently loaded page, wherein the server side uniquely determines and returns the URL security authentication information of the currently loaded page to the terminal according to the MID.

7. The method according to any one of claims 1 to 6, wherein displaying the website security authentication information on the browser side includes:

Load a display interface on the currently loaded page, use the display interface to display the authentication process information on the current page, and after the authentication is completed, display the website security authentication information on the display interface; and

During the authentication process, if the display interface is closed, the authentication process continues, and when the display interface is opened again, the website security authentication information is displayed.

8. The method according to any one of claims 1 to 7, wherein the website security identification information is displayed Displayed on the browser side, including:

Use any one or a combination of any one or more of the credibility value, color, and prompt to form the website security authentication information;

The obtained website security authentication information is displayed on the browser side.

9. The method according to any one of claims 1 to 8, wherein when the currently loaded page is a payment page,

Match the content of the currently loaded page with the web content of the malicious URL;

Obtain the URL security authentication information of the currently loaded page based on the matching results.

10. The method according to claim 9, wherein matching the content of the currently loaded page with the web page content of the malicious URL includes:

Perform D0M tree identification for multiple points in the content of the currently loaded page;

Select the structural features in the DOM tree of the currently loaded page and match them with the structural features of the DOM tree of the malicious URL;

If there is a match, it is confirmed that the currently loaded page is a webpage with a malicious URL, and the credibility value corresponding to the malicious URL is obtained as at least part of the URL security authentication information.

11. The method according to any one of claims 1 to 10, wherein displaying the website security authentication information on the browser side includes:

Display the website security authentication information in the website information display window; or

Receive the click instruction input by the user on the website, and display the website security authentication information in the website information display window.

12. The method according to any one of claims 1 to 11, further comprising:

If the user is not satisfied with the website security authentication information, error correction information input by the user is received, wherein the error correction information includes a credibility value approved by the user for the website.

13. The method according to any one of claims 1 to 12, further comprising:

If the website security authentication fails, authentication failure information is displayed to the user on the browser side, and the user is prompted whether to try again, and subsequent operations are performed according to the user's instructions.

14. The method according to any one of claims 1 to 13, wherein the method is implemented by being embedded in a browser in the form of a plug-in.

15. The method according to claim 14, wherein when the plug-in appears in the address bar of the browser in the form of a button,

Receive the user's click operation on the button to trigger the security authentication information acquisition request.

16. A device for displaying website security authentication information, including: The sending module is configured to send a user-triggered security authentication information acquisition request for the currently loaded page;

A receiving module configured to receive the URL security authentication information of the currently loaded page returned by the server side in response to the security authentication information acquisition request;

The display module is configured to display the website security authentication information on the browser side.

17. The device according to claim 16, wherein the website security authentication information is a security information weight generated by performing security authentication on the website corresponding to the currently loaded page based on at least one of the following parameters - blacklist , whitelist, number of unique visitor visits, server location, registration time, domain name, IP address, registrant, payment page, web page structural characteristics; different parameters correspond to different security information weights.

18. The device according to claim 17, wherein the weights of different parameters in the website security authentication information are adjustable.

19. The device according to any one of claims 16 to 18, wherein the sending module is further configured to: load a security authentication button in the address bar of the currently loaded page;

20. The device according to any one of claims 16 to 19, wherein the sending module is further configured to upload the URL and/or URL parsing IP of the currently loaded page to the server side.

21. The device according to claim 20, wherein the sending module is further configured to upload the MID of the terminal where the browser that loads the current page is located to the server side;

The receiving module is also configured to receive the URL security authentication information of the currently loaded page, wherein the server side uniquely determines and returns the URL security authentication information of the currently loaded page to the terminal according to the MID.

22. The device according to any one of claims 16 to 21, wherein the display module is further configured to: load a display interface on the currently loaded page, and use the display interface to display identification process information on the current page. , after the authentication is completed, display the website security authentication information on the display interface; and

23. The device according to any one of claims 16 to 22, wherein the display module is further configured to: use any one or a combination of a credibility value, a color, and a prompt to form the website address. Security identification information;

24. The device according to any one of claims 16 to 23, wherein the display module is further configured to: display the website security authentication information in the website information display window; or Receive the click instruction input by the user on the website, and display the website security authentication information in the website information display window.

25. The device according to any one of claims 16 to 24, further comprising:

The error correction module is configured to receive error correction information input by the user if the user is not satisfied with the website security authentication information, wherein the error correction information includes the credibility of the user's approval of the website. value.

26. The device according to any one of claims 16 to 25, wherein the display module is further configured to display authentication failure information to the user on the browser side if the website security authentication fails, and prompt the user whether Try again and perform subsequent operations according to the user's instructions.

27. The device according to any one of claims 16 to 26, wherein the device is embedded in the browser in the form of a plug-in.

28. The device according to any one of claims 16 to 27, wherein when the plug-in appears in the address bar of the browser in the form of a button,

The receiving module is further configured to receive the user's click operation on the button and trigger the security authentication information acquisition request.

29. A computer program, comprising computer readable code, which, when run on a computing device, causes the computing device to perform the display URL security authentication according to any one of claims 1 to 15 information method.

30. A computer-readable medium in which the computer program according to claim 29 is stored.