Browser Extension Authentication for Secure Enterprise Web Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securing enterprise content fail to allow access using third-party web browsers and lack effective identification and recommendation of security-enhancing browser extensions, leading to potential security breaches and resource inefficiencies.
Innovation Solution
A system utilizing a UEM extension and an extension recommendation engine (ERE) to authenticate users, enforce compliance with policies, and recommend browser extensions based on user browsing habits and group affiliations, ensuring secure access to enterprise content even through unmanaged browsers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users are allowed to use third-party web browsers to access enterprise content, then user preference and ease of operation are improved, but the system cannot determine whether the user device is enrolled or secure, worsening security reliability
Solution Approach 1:
The patent introduces a UEM extension as an intermediary component that operates within third-party browsers to bridge the security verification gap. This extension acts as a mediator between the unmanaged browser environment and the UEM system, enabling security checks without requiring the browser itself to be managed. The extension communicates device enrollment status and security compliance information to the UEM system, resolving the contradiction by allowing preferred browsers while maintaining security verification through the intermediary extension.
2Ease of operation
If users are permitted to browse freely without extension restrictions, then browsing freedom and ease of operation are improved, but poor browsing hygiene compromises device security and performance, worsening system reliability
Solution Approach 1:
The patent implements a self-service mechanism where the UEM extension automatically monitors user browsing behavior, identifies poor browsing hygiene patterns, and recommends appropriate extensions without requiring user intervention. The system autonomously collects browsing data, analyzes security risks, and provides targeted extension recommendations that users can optionally install. This approach maintains browsing freedom while improving security through automated, context-aware assistance rather than restrictive controls.
3Reliability
If the UEM system mandates specific browser extensions for all users, then device security and compliance are improved, but device complexity and ease of operation worsen due to forced installations
Solution Approach 1:
The patent applies local quality by providing differentiated extension recommendations based on individual user browsing patterns, device characteristics, and specific security needs. Rather than uniformly mandating the same extensions for all users, the system analyzes each user's browsing behavior and recommends only the necessary extensions for their specific context. This targeted approach maintains security compliance while reducing unnecessary complexity, as users only install extensions that are relevant to their actual browsing habits and risk profiles.
Data Source
AI summary
Systems and methods are described for increasing web browser security on a user device managed by a device management system. In an example, the user device can use an unmanaged web browser to access secure enterprise content using a browser extension provided by the enterprise. When a user attempts to access secure content from an unmanaged browser, the device management system can communicate with the extension and a management application on the user device to authenticate the user and verify that the user device complies with certain policies. In one example, the device management system can include an extension recommendation engine that analyzes user browsing data and recommends browser extensions for the user. Based on policies, the device management system can recommend the extension to the user or force installation of the extension on the user device.


