Browser Decrypting Encrypted URI Fragments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional digital rights management systems fail to securely manage and encrypt data objects shared outside their proprietary systems, and users lack easy access to encryption tools due to technical complexity and compatibility issues with existing protocols and applications.
Innovation Solution
A computer-implemented method and system that allows a browser application to decrypt an encrypted portion of a uniform resource identifier (URI) by requesting decryption information from an access control manager, enabling secure message transmission without requiring specialized software installation, by parsing and processing URIs with embedded encrypted fragments.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional digital rights management systems are used to secure data objects, then access control and authentication are provided within the system, but the systems cannot securely manage data objects shared outside their proprietary systems
Solution Approach 1:
The patent introduces an intermediary encryption mechanism that bridges proprietary digital rights management systems and external sharing environments. By encrypting data objects with externally accessible encryption keys before sharing, the system maintains security reliability while enabling compatibility with external systems and applications that lack native DRM support.
Solution Approach 2:
The patent segments the security architecture into two distinct layers: proprietary DRM protection for internal system access control, and external encryption for secure sharing outside the system. This segmentation allows each layer to operate independently, maintaining internal security while enabling external compatibility through standardized encryption protocols.
2Reliability
If users implement cryptographic functions without a digital rights management system, then data objects can be protected, but users require a level of technical sophistication unavailable to the average individual
Solution Approach 1:
The patent enables self-service encryption by allowing users to automatically encrypt data objects using integrated encryption functions within the proprietary system. The system handles key generation, encryption, and decryption processes automatically, eliminating the need for users to manually implement complex cryptographic functions while maintaining strong security protection.
Solution Approach 2:
The patent integrates multiple functions into the proprietary DRM system, including encryption, decryption, key management, and authentication, making the system universally accessible to all users regardless of technical sophistication. The unified interface allows average users to securely protect and share data objects without requiring specialized cryptographic knowledge.
3Reliability
If symmetric key cryptography is used for password protection, then data objects can be protected, but authorized users can share the password with unauthorized users
Solution Approach 1:
The patent extracts the password from the encryption key, allowing the encryption key to be securely stored and managed by the system without requiring user knowledge of the actual key material. Users interact with the system using passwords for authentication, while the system handles the more secure cryptographic keys separately, preventing key exposure through password sharing.
Solution Approach 2:
The patent transitions from a single-dimensional password-based protection model to a multi-dimensional security model that separates authentication (password) from encryption (cryptographic key). This dimensional separation allows the system to maintain strong cryptographic protection while using simpler password interfaces for users, eliminating the direct link between passwords and encryption keys that enables unauthorized access.
4Reliability
If users install specialized systems for encrypted message transmission, then message security is improved, but the systems are cumbersome and may not operate smoothly with preferred applications
Solution Approach 1:
The patent merges encryption functionality directly into the existing proprietary data sharing system, combining message protection with the application's native file sharing and communication capabilities. This integration eliminates the need for separate specialized encryption systems while maintaining strong security, as the encryption is transparently applied to all data objects shared through the application.
Solution Approach 2:
The patent creates a universal encryption framework that works across multiple applications and communication protocols without requiring application-specific implementations. By providing a standardized encryption interface that can be applied to any data object type and shared through any protocol, the system eliminates the need for users to install and configure multiple specialized encryption tools for different applications.
Data Source
AI summary
A computer-implemented method for decrypting, by a browser application, an encrypted portion of a fragment identifier within a uniform resource identifier includes receiving, by a browser application executing on a computing device, from a user, a uniform resource identifier including a delimiter and a fragment identifier, the fragment identifier comprising an encrypted portion. The method includes requesting, by the browser application, from an access control manager, decryption information associated with the fragment identifier. The method includes receiving, by the browser application, from the access control manager, the requested decryption information. The method includes decrypting, by the browser application, the encrypted portion of the fragment identifier with the requested decryption information.