US6085224A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for responding to hidden data and programs in a datastream
Assignee: Intracept Inc
•
Filing: 1997-03-11
•
Granted: 2000-07-04
•
Expires: 2017-03-11
Abstract
Abstract A system and method for detecting trigger events in datastreams received over a computer communication network is disclosed. The system includes an interceptor for intercepting datastreams from a computer network intended for an application program; a scanner for scanning the intercepted datastream for trigger events, such as cookie data, script commands, and applet programs; and an event response generator for processing detected trigger events. Configuration data is used to identify a response for trigger events such as disabling script commands or programs and deleting or modifying cookie data. The event indicators and an action menu are generated by the event response generator and delivered with the processed datastream to the application program. The application program displays the event indicators so the user is made aware of the trigger events and the action menu allows a user to respond to the detected trigger events. In the preferred implementation, the user may respond by obtaining information about the site which transmitted the datastream having the trigger events and then send e-mail to the administrator of the site. Other actions include modifying the configuration data so subsequent datastreams with the trigger event is passed by the system. Outbound messages from the application program are also intercepted and scanned for trigger events. In the preferred implementation, the configuration data are exchanged between the system and the application program so the user may modify the operation of the system. The configuration data are deleted from the outbound datastream before it is transmitted in the preferred implementation. The system and method of the present invention allow a user to view detected trigger events which otherwise would occur without the user's knowledge and provides the user with sufficient information so the user can make an informed decision as to whether to accept trigger events in a datastream from another site.
Inventors
- 👤 Richard H. Wagner
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-27 07:57
CPC Classifications
H; H04; H04L; H04L67/00; H04L67/2866; H04L67/30; H04L67/306; H04L67/50; H04L67/56; H04L67/561; H04L67/564; H04L67/75; H04L9/00; H04L9/40; H04L67/01; H04L67/02; H04L69/00; H04L69/30; H04L69/32; H04L69/322; H04L69/329
Claims Analysis
Total Claims: 51
Claim 1
Independent Claim
98 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; an event response generator for generating a response having event indicators to said detected trigger event in correspondence with action map data so that said detected trigger events may be displayed and said event indicators and an action menu are included in a data envelope of the scanned datastream for delivery to an application program.
Claim 2
Independent Claim
98 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; an event response generator for generating a response having event indicators to said detected trigger event in correspondence with action map data so that said detected trigger events may be displayed and said event indicators and an action menu are included in a data envelope of the scanned datastream for delivery to an application program.
Claim 3
Dependent Claim
25 words
The system of claim 1 wherein the interceptor intercepts the datastream in the application space of the application program for which datastreams are being intercepted.
Claim 4
Dependent Claim
50 words
The system of claim 1, the interceptor including a communication socket which executes as a process in a top layer of a communication stack, the communication socket for providing the intercepted datastream to the scanner prior to generation of a signal indicating the datastream is available for the application program.
Claim 5
Dependent Claim
13 words
The system of claim 1 wherein the data envelope is an HTML file.
Claim 6
Dependent Claim
16 words
The system of claim 4 further comprising: a script language program for implementing said action menu.
Claim 7
Dependent Claim
33 words
The system of claim 1 wherein the event response generator generates a response for a detected trigger event in an outbound message in correspondence with a user's modification of the action map data.
Claim 8
Dependent Claim
21 words
The system of claim 1 wherein said scanner detects one of an embedded identifier, unidentified file request, and an embedded command.
Claim 9
Dependent Claim
22 words
The system of claim 1 wherein the embedded command is one of an identifier assignment, a hidden command, and an execution command.
Claim 10
Independent Claim
86 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is processed by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event; and generating a log of detected trigger events.
Claim 11
Independent Claim
86 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is processed by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event; and generating a log of detected trigger events.
Claim 12
Dependent Claim
30 words
The method of claim 9, said datastream scanning further comprising: detecting one of an embedded identifier, unidentified file request, and an embedded command; and notifying the user of the detection.
Claim 13
Dependent Claim
14 words
The method of claim 10 further comprising the step of: disabling said detected command.
Claim 14
Dependent Claim
34 words
The method of claim 9, the detected trigger event generation further comprising: generating an event time, trigger event source identifier, trigger event identifier, and a selected action identifier for the log of trigger events.
Claim 15
Dependent Claim
32 words
The method of claim 12, the detected trigger event generation further comprising: generating file identifiers for the log of trigger events, the file identifiers identifying files corresponding to the detected trigger event.
Claim 16
Dependent Claim
17 words
The method of claim 9 wherein the intercepting step: intercepts the datastream at a communication socket level.
Claim 17
Dependent Claim
21 words
The method of claim 9 wherein the intercepting step intercepts the datastream in an application process space for a browser program.
Claim 18
Dependent Claim
27 words
The method of claim 9 further comprising: generating event indicators for detected trigger events; and delivering said event indicators to the application program in a data envelope.
Claim 19
Dependent Claim
33 words
The method of claim 16 further comprising: encapsulating said event indicators and an action menu in a data envelope; and coupling the data envelope to the datastream for delivery to the application program.
Claim 20
Dependent Claim
21 words
The method of claim 17 wherein the encapsulating step encapsulates the event indicators and the action menu in an HTML file.
Claim 21
Independent Claim
83 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 22
Independent Claim
83 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 23
Dependent Claim
21 words
The system of claim 19 wherein said scanner detects one of an embedded identifier, unidentified file request, and an embedded command.
Claim 24
Dependent Claim
21 words
The system of claim 20 wherein the embedded identifier is a cookie data field in a header of the scanned datastream.
Claim 25
Dependent Claim
27 words
The system of claim 20 wherein the unidentified file request is one of a user Universal Resource Locator (URL) and a URL request in a downloaded file.
Claim 26
Dependent Claim
22 words
The system of claim 20 wherein the embedded command is one of an identifier assignment, a hidden command, and an execution command.
Claim 27
Dependent Claim
28 words
The system of claim 19, the event response generator generating an action menu identifying an electronic mail (e-mail) option, an action map modification option, and an abort option.
Claim 28
Dependent Claim
39 words
The system of claim 19 wherein the interceptor intercepts disk input/output (I/O) utility calls so that disk I/O is disabled, the interception of disk I/O being enabled in response to initiation of a communication session with a communication stack.
Claim 29
Dependent Claim
17 words
The system of claim 19, wherein the event response is generated in correspondence with action map data.
Claim 30
Dependent Claim
19 words
The system of claim 19, wherein the interceptor intercepts the datastream in the application space of the application program.
Claim 31
Independent Claim
116 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting an identifier selected from the group including a cookie data field in a header of the scanned datastream, an unidentified file request, and an embedded command in the intercepted data stream; means for notifying a user of the detected identifier; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 32
Independent Claim
116 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting an identifier selected from the group including a cookie data field in a header of the scanned datastream, an unidentified file request, and an embedded command in the intercepted data stream; means for notifying a user of the detected identifier; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 33
Independent Claim
113 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting an identifier selected from the group including an embedded identifier, a user Universal Resource Locator (URL), a URL request, and an embedded command in the intercepted data stream; means for notifying a user of the detected identifier; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 34
Independent Claim
113 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is processed by an application program; a scanner for scanning the intercepted datastream and detecting an identifier selected from the group including an embedded identifier, a user Universal Resource Locator (URL), a URL request, and an embedded command in the intercepted data stream; means for notifying a user of the detected identifier; an event response generator for generating a response to said detected trigger event, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 35
Independent Claim
99 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is received by an application program; a scanner for scanning the intercepted datastream and detecting one of a cookie data field in a header of the scanned datastream, unidentified file request, and an embedded command in the intercepted datastream; means for notifying a user of the detected identifier, file request or embedded command; and an event response generator for generating an action menu identifying an electronic mail (e-mail) option, an action map modification option, and an abort option.
Claim 36
Independent Claim
99 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is received by an application program; a scanner for scanning the intercepted datastream and detecting one of a cookie data field in a header of the scanned datastream, unidentified file request, and an embedded command in the intercepted datastream; means for notifying a user of the detected identifier, file request or embedded command; and an event response generator for generating an action menu identifying an electronic mail (e-mail) option, an action map modification option, and an abort option.
Claim 37
Independent Claim
127 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is received by an application program and for intercepting disk input/output (I/O) utility calls so that disk I/O is disabled, the interception of disk I/O being enabled in response to initiation of a communication session with a communication stack; a scanner for scanning the intercepted datastream and detecting one of a cookie data field in a header of the scanned datastream, unidentified file request, and an embedded command in the intercepted datastream; means for notifying a user of the detected identifier, file request or embedded command; and an event response generator for generating a response to said detected trigger event in correspondence with action map data.
Claim 38
Independent Claim
127 words
A system for responding to trigger events detected in a datastream comprising: an interceptor for intercepting a datastream before the datastream is received by an application program and for intercepting disk input/output (I/O) utility calls so that disk I/O is disabled, the interception of disk I/O being enabled in response to initiation of a communication session with a communication stack; a scanner for scanning the intercepted datastream and detecting one of a cookie data field in a header of the scanned datastream, unidentified file request, and an embedded command in the intercepted datastream; means for notifying a user of the detected identifier, file request or embedded command; and an event response generator for generating a response to said detected trigger event in correspondence with action map data.
Claim 39
Independent Claim
71 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; and presenting an action menu identifying an electronic mail (e-mail) option, a configuration data modification option, and an abort option.
Claim 40
Independent Claim
71 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; and presenting an action menu identifying an electronic mail (e-mail) option, a configuration data modification option, and an abort option.
Claim 41
Dependent Claim
42 words
The method of claim 32 further comprising: locating an e-mail address corresponding to an originator for the detected trigger event; and sending an e-mail message to the located e-mail address in response to the e-mail option in the action menu being selected.
Claim 42
Dependent Claim
38 words
The method of claim 32 further comprising: modifying the detected trigger event in the intercepted datastream before the intercepted datastream is provided to the application program in response to the modification option of the action menu being selected.
Claim 43
Dependent Claim
27 words
The method of claim 32 further comprising: generating an abort message for the application program in response to the abort option of the action menu being selected.
Claim 44
Independent Claim
89 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datstream before the datstream is received by an application program; scanning the intercepted datastream and detecting an embedded command; disabling said detected command; notifying a user of the detected command in the intercepted datastream; and generating a response to said detected command in correspondence with configuration data, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 45
Independent Claim
89 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datstream before the datstream is received by an application program; scanning the intercepted datastream and detecting an embedded command; disabling said detected command; notifying a user of the detected command in the intercepted datastream; and generating a response to said detected command in correspondence with configuration data, the response including displaying an action menu including one or more user selectable options corresponding to actions to be executed in response to the detected trigger event.
Claim 46
Dependent Claim
18 words
The method of claim 36 wherein comment characters are placed around said detected command to disable said command.
Claim 47
Dependent Claim
23 words
The method of claim 36 wherein a return command is placed at a program invoked by said detected command to disable said command.
Claim 48
Independent Claim
67 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; and disabling disk I/O in response to initiation of a communication session with a communication stack.
Claim 49
Independent Claim
67 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; and disabling disk I/O in response to initiation of a communication session with a communication stack.
Claim 50
Independent Claim
99 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; generating event indicators for detected trigger events; encapsulating said event indicators and an action menu in a cookie data field of an HTTP header for an HTML file; coupling said HTML file to said datastream; and delivering said datastream with said coupled HTML file to said application program.
Claim 51
Independent Claim
99 words
A method for detecting and responding to trigger events in a datastream comprising: intercepting a datastream before the datastream is received by an application program; scanning the intercepted datastream and detecting a trigger event in the intercepted datastream; generating a response to said detected trigger event in correspondence with configuration data; generating event indicators for detected trigger events; encapsulating said event indicators and an action menu in a cookie data field of an HTTP header for an HTML file; coupling said HTML file to said datastream; and delivering said datastream with said coupled HTML file to said application program.
References Cited (Backward Citations)
US5826242A
Cited
US5878384A
Cited
US5778372A
Cited
US5736984A
Cited
US5857191A
Cited
US5867651A
Cited
US5809250A
Cited
US5848412A
Cited
US5852717A
Cited
US5987611A
Cited
US6011537A
Cited
US5861883A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-07-04 | 2004-01-03 | 2004-07-04 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-07-04 | 2008-01-03 | 2008-07-04 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-07-04 | 2012-01-03 | 2012-07-04 | $7700.00 | Window Closed / Lapsed |