Verfahren zur Filterung von Anwendungsnachrichten

Details

Veröffentlichungs-Nr.

EP4730703

Anmeldetag

16. Oktober 2024

Veröffentlichung

22. April 2026

Rechtsraum

EP

IPC

H04L9/40, H04L51/212

Abstract

The present invention relates to a method for filtering a message comprising arguments, to be exchanged between a client device and an application server, performed by an applicative gateway connected to said client device and said application server and configured for applying a positive filtering, and by an applicative risk computer connected to said applicative gateway and configured for applying a negative filtering, said method comprising, performed by said applicative gateway :• during a configuration phase:obtaining (S0) an Application Programming Interface (API) description file comprising templates of message arguments and indicating for each template whether an argument matching said template shall be subject or not to a negative filtering by the applicative risk computer,• at runtime:o receiving (S1) a message from said client device or application server,o applying (S2) a positive filtering to said received message,o generating (S3) from said received message a message extract, wherein said message extract comprises arguments of said received message which require a negative filtering by the applicative risk computer according to said obtained API description file, and wherein said message extract does not comprise arguments of said received message which do not require a negative filtering by the applicative risk computer according to said obtained API description file,∘ sending (S4) said generated message extract to said applicative risk computer,∘ receiving (S6) from the applicative risk computer a risk score computed by the applicative risk computer from said message extract,∘ when said received risk score is above a predetermined threshold, triggering a security countermeasure (S7).

Anmelder

Firma

THALES DIS FRANCE SAS

Land

🇫🇷 Frankreich