Browser Extension Detects Compromised Web Communications

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Web browser communications are vulnerable to unauthorized exposure due to malicious applications that intercept and modify data without user consent, posing a risk to sensitive information such as login credentials and security keys.

Innovation Solution

A web browser extension that detects compromised communications by sending a test request to a local non-HTTP service, expecting a non-HTTP response if the communication is secure, and an HTTP response if compromised, allowing it to prevent exposure by deactivating or notifying the user.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If a web browser sends communications to remote services, then information can be accessed and transmitted, but sensitive information may be exposed to malicious applications operating on the endpoint device

Engineering Contradiction:

Improveinformation access capabilityVSAvoidunauthorized exposure to sensitive information

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The browser extension performs a preliminary test request to a local service before allowing actual web browser communications to proceed. This preliminary action detects the presence of malicious applications that would intercept HTTP responses, enabling preventive measures to be taken before sensitive information is exposed

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The browser extension acts as an intermediary between the web browser and remote services by intercepting and analyzing test requests and responses. It mediates the communication by detecting malicious behavior patterns and blocking compromised communications while allowing legitimate traffic to pass through

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a browser extension implements communication validation by sending test requests, then compromised communications can be detected, but additional network traffic and processing overhead are introduced

Engineering Contradiction:

Improvedetection of compromised communicationsVSAvoidnetwork traffic and processing overhead

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The extension performs only a single test request to a local service rather than continuously monitoring all communications. This partial action provides sufficient detection capability while minimizing the additional network traffic and processing overhead

Inventive Principle:

Principle #16Partial or excessive action

Solution Approach 2:

The test request is directed to a local service running on the endpoint device, eliminating the need for external validation servers. This self-service approach reduces network traffic overhead while maintaining detection reliability

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS11687614B2Web browser communication validation extension

Publication Date: 2023.06.27 BANK OF AMERICA CORP

AI summary

A computing device comprising a secure browser extension for a web browser monitors for satisfaction of one or more operating conditions to identify whether one or more unauthorized applications are installed on the computing device. Based on satisfaction of at least one operating condition, the secure browser extension of the computing device sends an HTTP request to a known service via the web browser. The secure browser extension receives a response to the HTTP request via the web browser. The secure browser extension determines whether the received response is an HTTP response (e.g., from an unauthorized application) or a non-HTTP response (e.g., from the known service). Based on determining the received response is an HTTP response, the secure browser extension terminates the web browser session and generates a notification for display at the computing device that indicates web browser communications are compromised.