Browser Data Masking for Secure Partial Resource Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increased vulnerability of communications networks to cyberattacks due to the use of personal devices (BYOD) and the complexity of protecting enterprise data in cloud environments complicates the provision of confidentiality and integrity of digital resources.
Innovation Solution
A CyberSafe system with a cloud-based data and processing security hub and a secure web browser (SWB) in an isolated environment (CISE) monitors and controls data movement, enforces security policies, and provides high-resolution visibility and control over data access and motion, using features like watermarking, masking, and user behavior monitoring to enhance cyber protection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If personal devices (BYOD) are used to access enterprise resources, then accessibility and flexibility are improved, but vulnerability to cyberattacks and data leakage increases
Solution Approach 1:
The system segments the digital resource into multiple isolated copies, each accessible from different devices including personal BYOD devices. The resource is divided into isolated instances that can be accessed independently, allowing employees to access enterprise resources on personal devices without exposing the central system to cyberattacks. Each segmented copy maintains data integrity while enabling flexible access.
2Adaptability or versatility
If cloud-based access is implemented, then remote work capability is improved, but complexity of securing data increases
Solution Approach 1:
The system creates isolated copies of the digital resource that can be accessed remotely through cloud-based platforms. Each copy is independently secured and can be accessed from any location without requiring complex centralized security management. The copying mechanism enables remote work capability while simplifying security management by distributing the resource across multiple isolated instances rather than securing a single centralized system.
3Productivity
If data is made accessible to multiple users, then collaboration is improved, but risk of data leakage and unauthorized access increases
Solution Approach 1:
The digital resource is segmented into multiple isolated copies, each accessible to different users or user groups for collaboration. This segmentation allows multiple users to work simultaneously on different copies without risking data leakage between them. Each segmented copy maintains its own security boundaries, enabling efficient collaboration while preventing unauthorized access and data leakage across the entire system.
Data Source
AI summary
A method of controlling access to a digital resource of a group of digital resources, the method comprising: receiving a request from a user via a computer browser for access to a digital resource of a group of digital resources; determining if the user has authorization to access a first portion of the resource but not a second portion of the resource; and configuring the browser to redact the resource by locally masking or deleting the second portion at a user interface of the computer which presents the resource to the user without affecting data defining the resource at a source from which the resource is downloaded to provide the requested access.