Adaptive Rastering for Secure Interactive Web Browsing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users are vulnerable to computer attacks through browser vulnerabilities, especially when using outdated or legacy browsers, and existing surrogate browsing techniques often compromise user experience for security.
Innovation Solution
A surrogate browsing system that renders and transcodes web content on a remote server, providing a secure representation to the user's browser while maintaining a satisfying user experience, using a scalable and elastic architecture with DOM and resource transcoding to sanitize content and enforce security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If pixel mirroring or Document Object Model mirroring is used to protect the user's browser, then security is improved, but user experience deteriorates
Solution Approach 1:
The patent segments the browsing system into multiple components: the user's endpoint browser, a surrogate browser running in an isolated environment, and a communication channel between them. The surrogate browser handles potentially malicious content while the endpoint browser maintains a clean state, segmenting the attack surface to preserve both security and user experience
Solution Approach 2:
The patent introduces a surrogate browser as an intermediary between the user's endpoint browser and the potentially malicious web content. This intermediary executes JavaScript and renders content in an isolated environment, mediating the interaction to protect the endpoint browser while maintaining functional browsing experience
2Reliability
If a surrogate browser is used to interact with potentially problematic content, then security is improved, but interaction quality deteriorates
Solution Approach 1:
The patent creates a copy of the browsing environment in the form of a surrogate browser that runs in an isolated container. This copy interacts with the potentially malicious content while the original endpoint browser remains protected. The surrogate browser copies necessary browser functionalities to handle interactive elements safely
Solution Approach 2:
The patent adds a dimensional layer of isolation by running the surrogate browser in a separate execution environment (container or virtual machine). This creates a new dimension of security without affecting the functionality of the endpoint browser, allowing interactive content to be handled in the isolated dimension while preserving user experience in the main dimension
Data Source
AI summary
Adaptive rastering is disclosed. In one example, compositing data is received via a network from a surrogate browser, at an endpoint browser. At least a portion of a display list of the compositing data is transformed into a DOM tree comprising at least one semantic DOM element. The semantic DOM element is induced to be rendered by the endpoint browser. In another example, at least a portion of the display list is transformed into at least one of a plurality of rasterization targets. The at least one of the plurality of rasterization targets is induced to be rendered by the endpoint browser.


