Browser Extension Interception for Malicious Access Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Unauthorized browser function extension modules can be used maliciously for computer hacking, data theft, and other forms of abuse by manipulating search results, modifying web pages, and falsifying click data, posing a risk to internet security.
Innovation Solution
A method and system that intercepts and blocks unauthorized access by substituting new functions for original functions within the browser, checking the authorization of modules requesting these functions, and preventing the connection of unauthorized modules to the internet browser, thereby preventing the acquisition of documents and components through window messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If browser function extension modules are allowed to connect to the Internet browser, then user convenience and functionality are improved, but security risks and unauthorized access increase
Solution Approach 1:
The patent introduces an intermediary module that sits between the extension modules and the browser's internal functions. This intermediary intercepts function calls, checks authorization status, and either permits or blocks access. The intermediary acts as a security gatekeeper that allows legitimate extensions to function while preventing unauthorized modules from causing harm.
Solution Approach 2:
The system performs preliminary authorization checks before allowing extension modules to access browser functions. By substituting original functions with wrapped versions that include authorization verification, the system proactively prevents unauthorized access before it can occur, rather than reacting to security incidents after they happen.
2Reliability
If function substitution is implemented to check authorization, then security is improved, but system complexity increases
Solution Approach 1:
The patent creates a universal authorization mechanism that wraps multiple browser functions with a single authorization checking framework. Instead of implementing separate security checks for each individual function, the system uses a multi-functional wrapper approach where one authorization module can protect many different functions, reducing overall system complexity.
Solution Approach 2:
The system creates wrapper functions that copy the interface of original browser functions but add authorization checking logic. These copied functions maintain the same external interface as the originals, allowing them to be used interchangeably while providing enhanced security. This copying approach allows security to be added without fundamentally changing the function call structure.
3Object-affected harmful factors
If unauthorized modules are blocked, then security is improved, but legitimate functionality may be restricted
Solution Approach 1:
The authorization checking system provides feedback to extension modules about whether their access requests are permitted or denied. This feedback mechanism allows legitimate modules to understand why access was blocked and provides opportunities for correction or reauthorization, ensuring that only genuinely malicious modules are restricted while maintaining operation of legitimate extensions.
Data Source
AI summary
Disclosed is a method and system of preventing browser-based abuse. The method of preventing browser-based abuse may include determining whether an access based on a browser function extension module is a malicious access for acquiring data of an Internet browser, and blocking the access based on the browser function extension module when the access is determined to be a malicious access.