초록 ▼

A computer based system and method of providing security when receiving digital data at a client computer from one or more Web sites is disclosed. The method includes receiving security configuration information that specifies multiple security zones, each zone corresponding to a set of Web sites. T

A computer based system and method of providing security when receiving digital data at a client computer from one or more Web sites is disclosed. The method includes receiving security configuration information that specifies multiple security zones, each zone corresponding to a set of Web sites. The security configuration information also includes information specifying a set of security settings corresponding to each security zone. A security setting is a specification indicating an action to perform when a Web page from one of the security zones requests a protected operation to be performed. During a Web browsing session, the mechanism of the invention determines the security zone corresponding to the Web site currently being browsed. Prior to performing the protected operation, the mechanism of the invention determines the action to perform, based on the current Web site's security zone, the requested operation, and the security setting corresponding to the requested operation and the Web site's zone. Depending upon the security setting, the Web browser may perform the requested operation, prevent the requested operation from being performed, or prompt the user of whether to perform the requested operation. During the browsing of a Web site, the Web browser visually indicates the security zone corresponding to the current Web site.

대표청구항 ▼

1. A computer based method for providing client based security during a network browsing session between a client computer and a server computer, the method comprising:receiving, at the client computer, a Web document from the server computer for execution on the client computer that contains code i

1. A computer based method for providing client based security during a network browsing session between a client computer and a server computer, the method comprising:receiving, at the client computer, a Web document from the server computer for execution on the client computer that contains code in the actual content of the Web document that requests the client computer to perform an operation pertaining to the Web document; in response to the client computer receiving a Web document from the server computer for execution on the client computer that contains code in the actual content of the Web document that requests the client computer to perform an operation pertaining to the Web document, the client computer analyzing the code to determine whether the requested operation is a protected operation prior to executing the Web document; if a protected operation is to be performed, the client computer determining a security setting corresponding to the protected operation; and the client computer executing the Web document if performing the protected operation is allowed based on the security setting.