Browser Extension for Secure DOM Rendering

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Cloud computing techniques often bypass corporate security protocols and lack audit capabilities, making it difficult to monitor access to web pages and control user information, especially when dealing with untrusted scripts and embedded content.

Innovation Solution

A computer system with a processor configured to execute instructions that identify restricted elements in a document object model, apply custom rules to modify these elements, and render a modified document object model without rendering the original, thereby controlling access and information visibility within a browser.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If cloud computing techniques are used to provide software applications, then accessibility and convenience are improved, but security control and audit capability deteriorate

Engineering Contradiction:
ImproveaccessibilityVSAvoidsecurity control
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a browser extension as an intermediary component between the user and cloud-based applications. This extension acts as a security gateway that intercepts and controls access to web pages, enabling audit capabilities and security policies to be enforced without preventing cloud computing accessibility. The extension mediates between the cloud application and the user, maintaining both convenience and security control.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If embedded scripts are allowed in web pages, then functionality is improved, but security risks from untrusted scripts increase

Engineering Contradiction:
ImprovefunctionalityVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The browser extension performs preliminary actions by pre-defining security policies and rules before web pages are loaded. It establishes a framework of allowed and restricted elements in advance, then automatically applies these rules to incoming web content. This preliminary configuration enables the system to maintain functionality from embedded scripts while blocking potentially harmful untrusted scripts based on pre-established criteria.

Inventive Principle:
Principle #10Preliminary action

3Ease of manufacture

If the source document object model is rendered first and then modified, then rendering simplicity is improved, but visual stability deteriorates due to flickering

Engineering Contradiction:
Improverendering simplicityVSAvoidvisual stability
Core Design Contradiction:
Ease of manufactureVSStability of the object's composition

Solution Approach 1:

The patent applies preliminary action by modifying the document object model in advance before rendering occurs. The browser extension intercepts the DOM during the loading phase, applies security rules and modifications, and only then allows rendering. This ensures that the rendered content is stable from the start without any flickering, as the modifications are already in place before the user sees the content.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If security rules are applied to modify web content, then security control is improved, but information loss increases

Engineering Contradiction:
Improvesecurity controlVSAvoidinformation visibility
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The patent applies local quality by implementing granular, element-specific security rules rather than blanket restrictions. The browser extension allows security policies to be applied selectively to individual DOM elements based on their properties, location, and trust level. This enables the system to maintain security control while preserving necessary information visibility, as only specific restricted elements are modified rather than entire pages or all content.

Inventive Principle:
Principle #3Local quality

Data Source

PatentEP2642718B1Dynamic rendering of a document object model
Publication Date: 2020.09.23 INTERMEDIA NET INC
  • EP2642718B1 patent drawingFigure 1
  • EP2642718B1 patent drawingFigure 2
  • EP2642718B1 patent drawingFigure 3

AI summary

The present application relates to a computer having a processor configured to execute a set of instructions to render a customised version of a restricted document object model. A restricted element in a document object model is identified and at least one rule associated with the restricted element is accessed. The at least one rule is applied to the restricted element to generate a modified document object model which is then rendered. A related computer-implemented method is also covered by the present application. The present application relates to server-side authentication techniques; content filtering based on user-specific and context-based requirements; and audit trail techniques.