Communication device, communication system, and recording medium

Patent metadata

Field	Value
Publication number	US-2020250282-A1
Application number	US-201816758408-A
Country	US
Kind code	A1
Filing date	Oct 19, 2018
Priority date	Oct 27, 2017
Publication date	Aug 6, 2020
Grant date	—

Abstract

A communication device is installed in between a client terminal and a web server which performs communication with the client terminal. The communication device includes a memory, and processing circuitry coupled to the memory and configured to of information included in communication between the web server and the client terminal, perform obfuscation with respect to information related to web application, and send communication, which includes information obfuscated at the performing, to destination.

First claim

1 . A communication device that is installed in between a client terminal and a web server which performs communication with the client terminal, the communication device comprising:
a memory; and processing circuitry coupled to the memory and configured to:
perform obfuscation, of information included in communication between the web server and the client terminal, with respect to information related to web application, and
send communication, which includes information obfuscated at the performing, to destination.

2 . The communication device according to claim 1 , wherein, the processing circuitry is further configured to implement a method according to content type of an HTTP (HyperText Transfer Protocol) response and perform obfuscation with respect to portion in which the information related to the web application is specified.

3 . The communication device according to claim 2 , wherein, the processing circuitry is further configured to:
store keyword which is made of character string peculiar to web application in a first memory; refer to the first memory and detect, as the information related to the web application, character string similar to the keyword in an HTTP response sent from the web server; and substitute character string detected at the detecting with character string obtained as a result of obfuscation.

4 . The communication device according to claim 2 , wherein, when content type of the HTTP response is image, the processing circuitry is further configured to embed arbitrary character string in comment of the image.

5 . The communication device according to claim 1 , wherein, the processing circuitry is further configured to:
store pairs of URL, which indicates path to a static file peculiar to web application, and identifier, which is made of an arbitrary character string and which corresponds to the URL in a second memory; refer to the second memory; substitute the identifier included in an HTTP response, which is sent from the client terminal, with URL indicating path to a static file peculiar to the web application corresponding to the identifier; and substitute URL, which indicates path to a static file peculiar to the web application and which is included in an HTTP response sent from the web server, with identifier corresponding to the URL.

6 . A communication system comprising:
a client terminal; a web server that performs communication with the client terminal; and a communication device that is installed in between the client terminal and the web server, wherein the communication device includes
a memory; and
processing circuitry coupled to the memory and configured to:
of information included in communication between the web server and the client terminal, perform obfuscation with respect to information related to web application, and
send communication, which includes information obfuscated at the performing, to destination.

7 . A non-transitory computer-readable recording medium storing therein a communication program that causes a computer to execute a process comprising:
performing obfuscation with respect to information related to web application from among information included in communication between a web server and a client terminal; and sending obfuscated information to destination.

Assignees

• Nippon Telegraph & Telephone

Inventors

• Chida Nariyoshi
• Kanemoto Yo
• Aoki Kazufumi

Classifications

• G06F21/562

  Static detection · CPC title

• G06F21/128 Primary

  involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java · CPC title

• G06F21/14 Primary

  against software analysis or reverse engineering, e.g. by obfuscation · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F13/00

  Interconnection of, or transfer of information or other signals between, memories, input/output devices or central processing units (interface circuits for specific input/output devices G06F3/00 {; multiprogram control therefor  G06F9/46}; multiprocessor systems  G06F15/16 ) · CPC title