Browser Extension Authentication for Secure Enterprise Web Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current methods for securing enterprise content fail to allow access using third-party web browsers and lack effective identification and recommendation of security-enhancing browser extensions, leading to potential security breaches and resource inefficiencies.

Innovation Solution

A system utilizing a UEM extension and an extension recommendation engine (ERE) to authenticate users, enforce compliance with policies, and recommend browser extensions based on user browsing habits and group affiliations, ensuring secure access to enterprise content even through unmanaged browsers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If users are allowed to use third-party web browsers to access enterprise content, then user preference and ease of operation are improved, but the system cannot determine whether the user device is enrolled or secure, worsening security reliability

Engineering Contradiction:
Improveuser preference for third-party browserVSAvoidsecurity verification capability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a UEM extension as an intermediary component that operates within third-party browsers to bridge the security verification gap. This extension acts as a mediator between the unmanaged browser environment and the UEM system, enabling security checks without requiring the browser itself to be managed. The extension communicates device enrollment status and security compliance information to the UEM system, resolving the contradiction by allowing preferred browsers while maintaining security verification through the intermediary extension.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If users are permitted to browse freely without extension restrictions, then browsing freedom and ease of operation are improved, but poor browsing hygiene compromises device security and performance, worsening system reliability

Engineering Contradiction:
Improvebrowsing freedomVSAvoiddevice security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements a self-service mechanism where the UEM extension automatically monitors user browsing behavior, identifies poor browsing hygiene patterns, and recommends appropriate extensions without requiring user intervention. The system autonomously collects browsing data, analyzes security risks, and provides targeted extension recommendations that users can optionally install. This approach maintains browsing freedom while improving security through automated, context-aware assistance rather than restrictive controls.

Inventive Principle:
Principle #25Self-service

3Reliability

If the UEM system mandates specific browser extensions for all users, then device security and compliance are improved, but device complexity and ease of operation worsen due to forced installations

Engineering Contradiction:
Improvecompliance with UEM policiesVSAvoidbrowser extension management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies local quality by providing differentiated extension recommendations based on individual user browsing patterns, device characteristics, and specific security needs. Rather than uniformly mandating the same extensions for all users, the system analyzes each user's browsing behavior and recommends only the necessary extensions for their specific context. This targeted approach maintains security compliance while reducing unnecessary complexity, as users only install extensions that are relevant to their actual browsing habits and risk profiles.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS12531906B2Securing web browsing on a managed user device
Publication Date: 2026.01.20 OMNISSA LLC
  • US12531906B2 patent drawing
  • US12531906B2 patent drawing
  • US12531906B2 patent drawing

AI summary

Systems and methods are described for increasing web browser security on a user device managed by a device management system. In an example, the user device can use an unmanaged web browser to access secure enterprise content using a browser extension provided by the enterprise. When a user attempts to access secure content from an unmanaged browser, the device management system can communicate with the extension and a management application on the user device to authenticate the user and verify that the user device complies with certain policies. In one example, the device management system can include an extension recommendation engine that analyzes user browsing data and recommends browser extensions for the user. Based on policies, the device management system can recommend the extension to the user or force installation of the extension on the user device.