Tiered object-related trust decisions

Patent metadata

Field	Value
Publication number	US-10284576-B2
Application number	US-201514952339-A
Country	US
Kind code	B2
Filing date	Nov 25, 2015
Priority date	Feb 17, 2004
Publication date	May 7, 2019
Grant date	May 7, 2019

Abstract

Adware and viruses are examples of objects that may be embedded in a web page or linked to a web page. When such an object is detected to be associated with a web page loading on a browser, an analysis may be performed to determine a trust level for the object. The object is suppressed based on the trust level. A prompt is displayed to advise a user that the object has been suppressed, and to provide an opportunity to interactively accept or decline activation of an action for the object.

First claim

We claim:

1. A method comprising:
determining whether an activatable object associated with a web page is from an untrusted source;
when the activatable object is from the untrusted source, performing operations comprising:
displaying a modeless prompt to advise the user of the suppression of the activatable object, wherein the web page is operable to receive user interaction during display of the modeless prompt; and
providing, via the modeless prompt, an opportunity to interactively accept activation of the action associated with the activatable object; and

when the activatable object is not from the untrusted source, automatically activating the action associated with the activatable object.

2. The method of claim 1 , further comprising detecting a first user action, wherein the detection of the first user action comprises detecting a mouse interaction with the modeless prompt.

3. The method of claim 2 , wherein the mouse interaction comprises a mouse pointer hovering over the display of the modeless prompt.

4. The method of claim 3 , further comprising:
upon detection of a first user action, displaying a menu of selectable objects; and
detecting a second user action, wherein the second user action comprises selecting one of the selectable objects.

5. The method of claim 1 , wherein the modeless prompt comprises a menu of selectable objects.

6. The method of claim 1 , further comprising, when the activatable object is from an untrusted source, suppressing the activatable object.

7. A storage device storing one or more instructions that, when read, cause one or more processors on a client device to perform a method comprising:
determining whether an activatable object is from an untrusted source;
when the activatable object is from the untrusted source, performing operations comprising:
displaying a modeless prompt to advise the user of the suppression of the activatable object, wherein the web page is operable to receive user interaction during display of the modeless prompt; and
providing, via the modeless prompt, an opportunity to interactively accept activation of the action associated with the activatable object; and

when the activatable object is not from the untrusted source, automatically activating the action associated with the activatable object.

8. The storage device of claim 7 , further comprising detecting a first user action, wherein the detection of the first user action comprises detecting a mouse interaction with the modeless prompt.

9. The storage device of claim 8 , wherein the mouse interaction comprises a mouse pointer hovering over the display of the modeless prompt.

10. The storage device of claim 9 , wherein the method further comprises:
upon detection of a first user action, displaying a menu of selectable objects; and
detecting a second user action, wherein the second user action comprises selecting one of the selectable objects.

11. The method of claim 7 , wherein the method further comprises, when the activatable object is from an untrusted source, suppressing the activatable object.

12. A system comprising:
at least one processor;
a memory coupled to the at least one processor, the memory for storing instructions which, when executed by the at least one processor, performs a method, the method comprising:
determining whether the activatable object is from an untrusted source;
when the activatable object is from the untrusted source, performing operations comprising:
displaying a modeless prompt to advise the user of the suppression of the activatable object, wherein the web page is operable to receive user interaction during display of the modeless prompt; and
providing, via the modeless prompt, an opportunity to interactively accept activation of the action associated with the activatable object; and

when the activatable object is not from the untrusted source, automatically activating the action associated with the activatable object.

13. The system of claim 12 , wherein the method further comprises, when the activatable object is from an untrusted source, suppressing the activatable object.

14. The system of claim 12 , further comprising detecting a first user action, wherein the detection of the first user action comprises detecting a mouse interaction with the modeless prompt.

15. The system of claim 14 wherein the mouse interaction comprises a mouse pointer hovering over the display of the modeless prompt.

16. The system of claim 15 , wherein the method further comprises:
upon detection of a first user action, displaying a menu of selectable objects; and
detecting a second user action, wherein the second user action comprises selecting one of the selectable objects.

17. The system of claim 16 , wherein the selecting of the one of the selectable objects does not require activation of the mouse pointer.

18. The system of claim 14 , wherein the modeless prompt comprises a menu of selectable objects.

19. The method of claim 12 , wherein the activatable object is activated by a user action.

20. The method of claim 12 , wherein the detecting of the first user action results in displaying a modal prompt.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Sauve Aaron
• Huang Li-Hsin
• Schreiner Tony
• Davis Jeffrey
• Pipinich Tom
• Gass Jonathan
• Hally J Craig

Classifications

• H04L63/1433

  Vulnerability analysis · CPC title

• G06F21/60

  Protecting data · CPC title

• G06F11/3003

  Monitoring arrangements specially adapted to the computing system or computing system component being monitored · CPC title

• G06F21/52 Primary

  during program execution, e.g. stack integrity {; Preventing unwanted data erasure; Buffer overflow} · CPC title

• G06F2221/2113

  Multi-level security, e.g. mandatory access control · CPC title