Unauthenticated redirection requests with protection

摘要

A redirection object may be obtained, based on a current request of a current requestor. The redirection object request may be associated with a response to a previous request for a redirection to a destination network location, the previous request associated with a previous requestor. A current transmission origination location associated with a current requestor transmission of the current request may be determined. It may be determined whether the current transmission origination location includes a similarity to a previous transmission origination location associated with a previous transmission of the previous request, based on identification information included in the redirection object. It may be determined whether to initiate a redirect operation of the current requestor to the destination network location, based on a result of the determining of the similarity between the current transmission origination location and the previous transmission origination location.

主权项

1. A system comprising:
a redirect request receiving component that obtains a first request from a first originating unauthenticated requestor for a redirection Uniform Resource Locator (URL); a first originating location determination component that determines a first originating Internet Protocol (IP) address associated with an originating transmission of the first request; a redirection object generator that generates, via a device processor, a first redirection object that includes a retransmission location indicator and first information associated with identification of the first originating IP address, without authentication of the first originating unauthenticated requestor; a response transmission component that initiates transmission of the first redirection object via a response to the first originating unauthenticated requestor, in response to the first request for the redirection URL; a redirection object receiving component that obtains the first redirection object transmitted from a second originating unauthenticated requestor; a second originating location determination component that determines a second originating IP address associated with an originating transmission of the first redirection object from the second originating unauthenticated requestor; a similarity determination component that determines an originating transmission location similarity between the first originating IP address and the second originating IP address; and a redirect decision component that determines whether to initiate a redirection associated with the first redirection object, based on the determined originating transmission location similarity, without authentication of the first originating unauthenticated requestor or the second originating unauthenticated requestor.