Browser Extension for Real-Time Sensitive Data Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web application administrators have limited control and visibility over user actions during web sessions, and existing solutions require complex setup and maintenance, lacking intuitive control over web applications on a per-element basis.
Innovation Solution
Implementing browser components that monitor and analyze browser session data, detect sensitive data elements, and trigger control actions based on predefined rules, allowing administrators to enforce security measures on a per-element basis within web applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If administrators implement comprehensive monitoring and control mechanisms for web sessions, then security control and visibility over user actions is improved, but device complexity and maintenance burden increases
Solution Approach 1:
The patent introduces a browser extension as an intermediary component that runs locally in the user's browser. This extension acts as a mediator between the web application and the administrator's control system, capturing session data locally and transmitting only relevant information to remote servers. This approach improves security control while reducing the complexity of implementing comprehensive monitoring, as the heavy lifting is done by the lightweight browser extension rather than complex server-side infrastructure.
Solution Approach 2:
The patent extracts and processes sensitive data elements locally within the browser extension before transmission to remote servers. By taking out the data processing function from the complex monitoring infrastructure and placing it in the simple browser extension, the system achieves comprehensive security monitoring without requiring complex centralized processing systems, thereby reducing maintenance burden.
2Reliability
If administrators implement per-element control within web applications, then control precision and security coverage is improved, but ease of operation and setup simplicity deteriorates
Solution Approach 1:
The browser extension automatically identifies and captures sensitive data elements within web applications without requiring administrators to manually configure each element. The extension self-services by scanning the web page DOM, identifying sensitive data patterns, and automatically transmitting relevant information to the monitoring system. This eliminates the need for complex per-element configuration while maintaining high control precision.
Solution Approach 2:
The browser extension is designed as a universal solution that can monitor and control multiple different web applications through a single implementation. Rather than requiring separate configurations for each application or element, the extension provides multi-functional monitoring capabilities that work across various web applications, significantly simplifying the setup process while maintaining comprehensive control precision.
3Reliability
If real-time monitoring of browser session data is implemented, then detection capability and security response time is improved, but use of energy and computational resources increases
Solution Approach 1:
The system implements local quality processing by having the browser extension perform lightweight local analysis of session data to identify sensitive elements, rather than continuously transmitting all data for remote analysis. The extension processes data locally with minimal computational overhead, transmitting only identified sensitive elements to remote servers. This approach maintains high detection capability while significantly reducing the computational resources required compared to continuous real-time monitoring of all session data.
Data Source
AI summary
Disclosed embodiments relate to systems and methods for securing sensitive data during web sessions. Techniques include initiating, by a browser component executing on an endpoint device, a browser session associated with a user; monitoring, by the browser component, browser session data associated with the browser session, the browser session data being derived from one or more actions taken by the user; detecting at least one sensitive data element within the browser session data; determining whether the at least one sensitive data element triggers a control action; and based on a determination that the at least one sensitive data element triggers the control action, causing the control action to be performed.