Shopify Inc.

Dennis Ho

Devon Meunier

Scott Francis

Blake Delaney Manders

John Jong-Suk Lee

Francis Pelland

Osama Sidat

There may be situations in which it is desirable to dynamically implement a rule on the firewall in response to detecting a particular pattern of user activity. However, the software code required for tracking user activity, identifying patterns of user activity, and deciding what action to take may be relatively complex. Deploying such software code on a firewall increases the complexity of the firewall. For example, the firewall can no longer be 'stateless'. In some embodiments, the destination server works in combination with the firewall. The destination server monitors traffic to determine particular patterns of user activity. In response to a particular pattern of user activity being detected, an appropriate rule is established and the firewall is sent a command to implement the rule.

Systems and methods for dynamic traffic control at a firewall

A system for web traffic control is provided that is based on information related to a user's previous online activity. In one embodiment, the system is able to collect information about incoming traffic, compare the information to a generated ruleset, and make and implement a decision about how to handle each request/user interaction. In one embodiment, the ruleset is based on e-commerce rules. An e-commerce rule is a unit of decision making logic based on the user's previous online activity on the e-commerce platform, e.g. 'If request is to add an item to user's cart, and if user already added something to their cart less than one second ago, then block request'. In some embodiments, the rules may be executed at the firewall and/or in a web application on the e-commerce platform. In some embodiments, one or more rules may be recommended to a merchant.

Systems and methods for web traffic control

Disclosed are systems and methods that require/force bots to access and interact with webpages at a similar level to humans, by including an executable script that generates/updates a test value for a webpage. The client devices must perform certain processing and/or rendering of the webpage to call the computations necessary for generating the updated test value. The script must be executed as a function of processing and/or rendering the webpage. The script may be retrieved from the webserver as a function of processing and/or rendering the webpage. When the browser executes this script, the browser generates the updated test value. At some point, the client device submits a request for certain process with the updated test value. The server compares the inbound test value from the client device against an initial/previously received test value or an expected test value to determine whether the browser is being operated by a human.

Hidden line property of online content to inhibit bot activity

Methods and systems for using a distributed ledger to record bot mitigation test results and enable servers to determine a bot mitigation score for a remote device based on previously recorded test results associated with the remote device. The server may detect a trigger for bot mitigation in association with a remote device, obtain identifying data regarding the remote device and search a distributed ledger using the identifying data to locate one or more test results stored in records on the distributed ledger containing the identifying data. It may then determine a bot likelihood score based on the one or more test results, compare the bot likelihood score to a threshold and, in response to the comparison, execute a mitigation action.

Systems and methods for bot mitigation

System and methods are provided to regulate sales of a product in an online store using computer-implemented delays. The computer-implemented delays can, for example, help mitigate the use of bots in the online store, provide different customers with equal access to the product and/or provide certain customers with priority access to the product. According to an embodiment, a method includes receiving an indication that a user intends to purchase an item of a product in an online store, and determining a delay for a sale of the item to the user to regulate sales of the product. Before completing the sale of the item to the user, the delay is implemented in the online store.

Systems and methods to regulate sales of a product in an online store

A computer-implemented system and method of dynamically switching between a full checkout process and a partial checkout process based on a payment processor load condition. An e-commerce platform may receive checkout requests in connection with a merchant account and may complete, for each of at least one of the checkout requests, an authorization operation and a capture operation via a payment processor. If the platform detects a first payment throughput limit event with regard to the payment processor then it completes a respective authorization operation for each new checkout request, and delays a respective capture operation for the new checkout request until after a second payment throughput limit event is detected.

Growing community of inventors

Rockcliffe, Canada

Dennis Ho