Method and device for providing authentication information on web page

Patent metadata

Field	Value
Publication number	US-10686835-B2
Application number	US-201515535043-A
Country	US
Kind code	B2
Filing date	Oct 10, 2015
Priority date	Dec 10, 2014
Publication date	Jun 16, 2020
Grant date	Jun 16, 2020

Abstract

The present disclosure provides a method for an authentication system to provide authentication information for a web page, comprising: receiving a request for authentication information from a web page; judging whether the web page is redirected to through a relevant search engine; judging whether the web page satisfies a condition of displaying the authentication information; and providing the authentication information to the web page satisfying the condition. By providing authentication information to a web site through a search engine, with the combination of the authentication system with the relevant search engine, the reliability and security of authentication information are enhanced. Besides, the user may autonomously edit and manage the displaying pattern of the authentication information, such that the authentication information may be displayed in real time on the web page.

First claim

The invention claimed is:

1. A method for providing authentication information for a web page, comprising:
receiving a request for authentication information from code embedded in the web page that includes content displayed on a web browser in response to being opened thereby;
determining whether the web page is redirected to through a relevant search engine;
when the web page is not redirected to through the relevant search engine, rejecting to provide the authentication information;
when the web page is redirected to through the relevant search engine, performing following operations:
determining whether the web page satisfies a condition of displaying the authentication information by judging whether a URL of the webpage matches a pre-stored URL; and

responsive to determining that the web page satisfies the condition of displaying the authentication information, providing the authentication information to the web page satisfying the condition, wherein the authentication information is obtained and authenticated through an authentication system associated with the relevant search engine.

2. The method according to claim 1 , wherein the embedded code requests and displays the authentication information, and obtains the URL of the web page and feeds the URL to the authentication system.

3. The method according to claim 1 , wherein the code is a script code and is in a page head or a page foot of a file corresponding to the web page.

4. The method according to claim 1 , further comprising:
providing an interface for editing a displaying manner of the authentication information is provided to the registered user.

5. The method according to claim 4 , wherein the displaying manner of the authentication information comprises:
whether the authentication information is displayed on the web page, a format of displaying the authentication information, and a position the authentication information displayed on the web page.

6. An apparatus for providing authentication information to a web page, comprising:
at least one processor; and
a memory storing instructions, the instructions when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:
receiving a request for authentication information from code embedded in the web page that includes content displayed on a web browser in response to being opened thereby;
determining whether the web page is redirected to through a relevant search engine;
when the web page is not redirected to through the relevant search engine, rejecting to provide the authentication information;
when the web page is redirected to through the relevant search engine, performing following operations:
determining whether the web page satisfies a condition of displaying the authentication information by judging whether a URL of the webpage matches a pre-stored URL; and

responsive to determining that the web page satisfies the condition of displaying the authentication information, providing the authentication information to the web page satisfying the condition, wherein the authentication information is obtained and authenticated through an authentication system associated with the relevant search engine.

7. The apparatus according to claim 6 , wherein the step of determining whether the web page satisfies a condition of displaying the authentication information further comprises:
determining whether the authentication information matching the URL of the web page is stored; and
when the authentication information matching the URL of the web page is stored, determining whether the authentication information is displayed on the web page;
when the authentication information is set to being displayed on the web page, redirecting to the subsequent step of providing the authentication information to the web page satisfying the condition; otherwise, the step of determining whether the web page satisfies a condition of displaying the authentication information further comprises rejecting to provide the authentication information.

8. The apparatus according to claim 6 , wherein the operations further comprise:
providing an interface for a registered user to edit a displaying manner of the authentication information.

9. The apparatus according to claim 8 , wherein the displaying manner of the authentication information comprises:
whether the authentication information is displayed on the web page, a format of displaying the authentication information, and a position of the authentication information displayed on the web page.

10. The apparatus according to claim 6 , wherein the operations further comprise:
recommending the web page associated with the authentication information but without installation of a script code to a user through web search.

11. A system for providing authentication information for a web site through a search engine, the system comprising the search engine and an apparatus for providing authentication information, the apparatus comprising:
receiving a request for authentication information from code embedded in the web page that includes content displayed on a web browser in response to being opened thereby;
determining whether the web page is redirected to through a relevant search engine;
when the web page is not redirected to through the relevant search engine, rejecting to provide the authentication information;
when the web page is redirected to through the relevant search engine, performing following operations:
determining whether the web page satisfies a condition of displaying the authentication information by judging whether a URL of the webpage matches a pre-stored URL; and
responsive to determining that the web page satisfies the condition of displaying the authentication information, providing the authentication information to the web page satisfying the condition, wherein the authentication information is obtained and authenticated through an authentication system associated with the search engine.

12. The system according to claim 11 , wherein
the search engine is configured to receive a search request and display links to search results according to the search request; and based on one selected link to one of the search results, redirect to the web page corresponding to the selected link; and
the apparatus for providing authentication information is configured to receive the request for the authentication information issued by the web page and provide or not provide the authentication information to the web page.

13. A non-transitory computer storage medium storing computer instructions which, when being executed, cause operations to be performed, the operations comprising:
receiving a request for authentication information from code embedded in a web page that includes content displayed on a web browser in response to being opened thereby;
determining whether the web page is redirected to through a relevant search engine;
when the web page is not redirected to through the relevant search engine, rejecting to provide the authentication information;
when the web page is redirected to through the relevant search engine, performing following operations:
determining whether the web page satisfies a condition of displaying the authentication information by judging whether a URL of the webpage matches a pre-stored URL; and

responsive to determining that the web page satisfies the condition of displaying the authentication information, providing the authentication information to the web page satisfying the condition, wherein the authentication information is obtained and authenticated through an authentication

Assignees

• Baidu online network technology beijing co ltd

Inventors

• Tan Jing
• Chang Bingxin
• Cui Yan
• Zhang Zhenping
• Zhou Qi
• Zhang Zheng
• Dong changyang
• He Xiaohang
• Shi Kuan

Classifications

• G06F21/44 Primary

  Program or device authentication · CPC title

• H04L9/32

  including means for verifying the identity or authority of a user of the system {or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials} · CPC title

• G06F16/958

  Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking · CPC title

• G06F16/951

  Indexing; Web crawling techniques · CPC title

• H04L63/1483 Primary

  service impersonation, e.g. phishing, pharming or web spoofing (detection of rogue wireless access points H04W12/12) · CPC title