Multi-Tab Browser Isolation With Active Tab Connection Suppression
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The traditional enterprise network architecture, with a well-defined perimeter, is no longer effective as applications move to the cloud, increasing security risks on unsecured and unmanaged devices and exposing enterprise data to threats, necessitating a new approach for secure access and browser isolation.
Innovation Solution
A cloud-based system provides multi-tab browser isolation and zero trust network access, creating secure tunnels between endpoints and on-premises proxies, ensuring only authorized users access specific applications through a lightweight software connector, and isolating web content processing to a secure cloud environment to prevent threats and data exfiltration.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If browser isolation is implemented to protect users from malware and cyberattacks, then security is improved, but device complexity increases due to the need for secure tunnels, cloud-based processing, and connection management
Solution Approach 1:
The patent introduces a cloud-based secure web gateway as an intermediary between users and the internet. This gateway establishes secure tunnels, proxies web requests, and manages browser isolation without requiring complex local security infrastructure on user devices. The intermediary handles connection management and tab switching coordination centrally.
Solution Approach 2:
The system segments browser functionality into isolated tabs, each with its own connection management. When switching between tabs, only the active tab maintains direct connections while others are suppressed. This segmentation allows independent control of each tab's network access, simplifying overall connection management.
2Adaptability or versatility
If multi-tab browser isolation is implemented to provide secure access to multiple applications, then access control is improved, but connection management complexity increases when switching between tabs
Solution Approach 1:
The system dynamically manages connections based on active tab state. When a user switches tabs, the system automatically suppresses connections for inactive tabs and establishes connections for active tabs. This dynamic connection management adapts to user behavior patterns and maintains appropriate access control without manual configuration.
Solution Approach 2:
The cloud-based gateway receives feedback about which tabs are active and adjusts connection suppression accordingly. The system monitors tab switching events and automatically updates connection states, ensuring that only active tabs can access the internet while inactive tabs remain isolated. This feedback mechanism simplifies connection management by automating the process.
3Reliability
If web content processing is moved to cloud environment to isolate threats, then data integrity is improved, but network dependency increases requiring secure tunnels and cloud connectivity
Solution Approach 1:
The cloud-based secure web gateway acts as an intermediary that handles all web content processing remotely. Users access content through secure tunnels to the gateway, which processes and isolates web content before delivering it to users. This intermediary approach maintains data integrity by processing content in a controlled cloud environment while providing secure network access through established tunnels.
Data Source
AI summary
Systems and methods include initiating a browser isolation session between a user device and a remote browser, wherein the browser isolation session includes a first isolated browser tab and a second isolated browser tab; providing a connection to the first isolated browser tab; and responsive to a request for switching to the second isolated browser tab, suppressing the connection to the first isolated browser tab; and un-suppressing a connection to the second isolated browser tab.