Communication device, communication system, and recording medium

Patent metadata

Field	Value
Publication number	US-11372953-B2
Application number	US-201816758408-A
Country	US
Kind code	B2
Filing date	Oct 19, 2018
Priority date	Oct 27, 2017
Publication date	Jun 28, 2022
Grant date	Jun 28, 2022

Abstract

A communication device is installed in between a client terminal and a web server which performs communication with the client terminal. The communication device includes a memory, and processing circuitry coupled to the memory and configured to of information included in communication between the web server and the client terminal, perform obfuscation with respect to information related to web application, and send communication, which includes information obfuscated at the performing, to destination.

First claim

The invention claimed is:

1. A communication device that is installed in between a client terminal and a web server which performs communication with the client terminal, the communication device comprising:
a memory; and
processing circuitry coupled to the memory and configured to:
perform obfuscation of information included in a communication between the web server and the client terminal, with respect to information related to a web application, and
send the communication, which includes information obfuscated at the performing, to destination, wherein
when the content type of the HTTP response is an image, the processing circuitry is further configured to embed an arbitrary character string in a comment of the image, and
the performing obfuscation includes embedding a random character string in a portion for embedding the comment.

2. The communication device according to claim 1 , wherein, the processing circuitry is further configured to implement a method according to content type of an HTTP (HyperText Transfer Protocol) response and perform the obfuscation with respect to portion in which the information related to the web application is specified.

3. The communication device according to claim 2 , wherein, the processing circuitry is further configured to:
store a keyword which is made of a character string peculiar to the web application in a first memory;
refer to the first memory and detect, as the information related to the web application, a character string similar to the keyword in an HTTP response sent from the web server; and
substitute the character string detected at the detecting with a character string obtained as a result of obfuscation.

4. The communication device according to claim 1 , wherein, the processing circuitry is further configured to:
store pairs of a URL, which indicates a path to a static file peculiar to the web application, and an identifier, which is made of an arbitrary character string and which corresponds to the URL, in a second memory;
refer to the second memory;
substitute the identifier included in an HTTP response, which is sent from the client terminal, with the URL indicating the path to the static file peculiar to the web application corresponding to the identifier; and
substitute the URL, which indicates the path to the static file peculiar to the web application and which is included in an HTTP response sent from the web server, with the identifier corresponding to the URL.

5. A communication system comprising:
a client terminal;
a web server that performs communication with the client terminal; and
a communication device that is installed in between the client terminal and the web server, wherein
the communication device includes
a memory; and
processing circuitry coupled to the memory and configured to:
of information included in a communication between the web server and the client terminal, perform obfuscation with respect to information related to web application, and
send the communication, which includes the information obfuscated at the performing, to destination, wherein
when the content type of the HTTP response is an image, the processing circuitry is further configured to embed an arbitrary character string in a comment of the image, and
the performing obfuscation includes embedding a random character string in a portion for embedding the comment.

6. A non-transitory computer-readable recording medium storing therein a communication program that causes a computer to execute a process comprising:
performing obfuscation with respect to information related to a web application from among information included in a communication between a web server and a client terminal; and
sending the obfuscated information to destination, wherein
when the content type of the HTTP response is an image, the processing circuitry is further configured to embed an arbitrary character string in a comment of the image, and
the performing obfuscation includes embedding a random character string in a portion for embedding the comment.

Assignees

• Nippon Telegraph & Telephone

Inventors

• Chida Nariyoshi
• Kanemoto Yo
• Aoki Kazufumi

Classifications

• G06F21/14 Primary

  against software analysis or reverse engineering, e.g. by obfuscation · CPC title

• G06F13/00

  Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units (interface circuits for specific input/output devices G06F3/00 {; multiprogram control therefor  G06F9/46}; multiprocessor systems  G06F15/16 ) · CPC title

• G06F21/562

  Static detection · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/128 Primary

  involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java · CPC title