US 11,818,149 B2
Content delivery network (CDN) edge server-based bot detection with session cookie support handling
David Senecal, Santa Clara, CA (US); Prajakta Bhurke, Santa Barbara, CA (US); and Tu Vuong, San Francisco, CA (US)
Assigned to Akamai Technologies, Inc., Cambridge, MA (US)
Filed by Akamai Technologies, Inc., Cambridge, MA (US)
Filed on Jun. 28, 2022, as Appl. No. 17/851,574.
Application 17/851,574 is a continuation of application No. 16/273,223, filed on Feb. 12, 2019, granted, now 11,374,945, issued on Jun. 28, 2022.
Claims priority of provisional application 62/629,868, filed on Feb. 13, 2018.
Prior Publication US 2022/0329610 A1, Oct. 13, 2022
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1416 (2013.01) [H04L 63/1466 (2013.01)] 10 Claims
OG exemplary drawing
 
1. Apparatus, comprising:
a hardware processor; and
computer memory holding computer program instructions executed by the hardware processor, the computer program instructions comprising program code configured to:
upon initiation of a session between a client and a site protected by a detection service, renew and provide the requesting client a first cookie, and initialize and provide the client a second cookie, the first cookie configured to identify a user associated with the client and to selectively throttle data collection at the client, and the second cookie configured to identify the session, the first and second cookies being different from one another;
as a page that includes a reference to an endpoint is returned to the client, inject into the page a reference to a data collection script, the script configured to record one or more interactions at the client, to collect sensor data about the interactions, and to send the collected sensor data;
receive and forward collected sensor data to the detection service;
responsive to intercepting a request for the endpoint, determine whether the first and second cookies are present in the request;
when the first and second cookies are present and valid, issue a query to the detection service to obtain a threat score associated with the client, the threat score based at least in part on the collected sensor data; and
determine based at least in part on the threat score received from the bot detection service whether the request for the endpoint should be forwarded onward for handling.