Browser Extension Password Capture for External Policy Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Organizations struggle to enforce password policies on external web-based services, which are not managed by them, leading to potential unauthorized access and data breaches.
Innovation Solution
A method and system that utilizes a browser extension to analyze and capture password inputs on external web pages, evaluate them against specified policies, and generate alerts for violations, ensuring compliance with organizational password policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If organizations enforce password policies on external web-based services, then security and data protection are improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The patent employs a browser extension as an intermediary component that operates between the user and external web-based services. This extension captures password inputs, evaluates them against organizational policies, and prevents submission of non-compliant passwords without requiring modifications to the external services themselves. This mediator approach enables policy enforcement while maintaining the simplicity of external services.
Solution Approach 2:
The browser extension performs self-service by automatically capturing password inputs, evaluating them against stored policy rules, and preventing submission of violating passwords. The system serves itself by maintaining local policy rules and autonomously enforcing them without requiring continuous external service involvement or complex centralized management.
2Speed
If password capture and evaluation is performed client-side, then response time is improved, but loss of information about password composition increases
Solution Approach 1:
The patent applies preliminary action by performing password evaluation locally in the browser extension before the password is submitted to the external service. The extension pre-checks password strength and policy compliance using client-side algorithms, immediately preventing submission of weak passwords. This eliminates the need for slow server-side validation while maintaining comprehensive password composition analysis through client-side evaluation rules.
Data Source
AI summary
Methods, storage systems and computer program products implement embodiments of the present invention method for protecting a client computer, which includes a processor and a display. The method includes analyzing a web page that was downloaded to the client computer, and identifying, by the processor, a password input field in the web page. After rendering the password input field to the display, an input to the password input field is captured, and the captured input is evaluated against a specified password policy. Finally, an alert is generated upon detecting a violation of the specified password policy.