Browser Extension Rule Mediator for Privacy Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing browser extensions have unrestricted access to web page content, compromising security and user privacy, as they need to inject scripts or ask permission to access content for taking actions, which exposes sensitive information.
Innovation Solution
Implementing a system where browser extensions register rules with a browser process module defining conditions and actions, allowing a renderer process module to apply these rules to web page content without exposing the content to the extension, thus enabling actions like displaying page actions or hiding elements without the extension's direct access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If browser extensions are given unrestricted access to web page content to perform actions, then the functionality and features of browser extensions are enhanced, but security and user privacy are compromised
Solution Approach 1:
The patent introduces a browser process module as an intermediary between browser extensions and web page content. This mediator applies registered rules to determine whether extensions can access or perform actions on specific content, allowing functionality while maintaining security through controlled access rather than unrestricted access
Solution Approach 2:
The patent segments the browser architecture into distinct components: browser extensions, a browser process module with rule registration and management capabilities, and a renderer process module. This segmentation allows each component to have specific responsibilities, with the browser process module acting as a security layer that filters and controls what extensions can access
2Ease of operation
If browser extensions inject scripts or ask permission to access web page content, then they can perform required actions, but sensitive information is exposed
Solution Approach 1:
The patent implements preliminary action by requiring browser extensions to register their rules in advance with the browser process module before any content access or actions are permitted. The browser process module stores these rules and applies them proactively to evaluate whether extensions can access or modify specific content, preventing unnecessary exposure of sensitive information
3Productivity
If browser extensions have direct access to web page content, then they can efficiently perform actions, but the risk of data exposure increases
Solution Approach 1:
The browser process module serves as a mediator that maintains efficient rule evaluation while protecting data. It registers and stores extension rules, then applies them to renderer process information to determine permitted actions without requiring extensions to directly access or read web page content, thus maintaining efficiency while reducing data exposure risk
Data Source
AI summary
A method for controlling actions for browser extensions includes registering, at a browser process module, a list of one or more rules from a browser extension, where the rules define one or more conditions and one or more corresponding actions to take when the conditions are satisfied. A renderer process module that is in communication with the browser process module applies the conditions to content of web pages rendered in the browser application. The renderer process module determines whether any of the conditions are satisfied by the content of the web pages rendered in the browser application using the renderer process module. The browser process module or the renderer process module performs the actions defined in the rules in response to at least one of the conditions defined in the rules being satisfied.