Browser Policy Enforcement Modules for Secure Web Application Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current web browsers are insufficient for securely managing web applications on client devices, particularly in business environments, as they lack essential functions for secure operation and policy enforcement.
Innovation Solution
A web browser that integrates a network policy enforcement unit, storage policy enforcement unit, and ancillary policy enforcement unit to constrain web application logic according to acquired policies, ensuring secure data communication, storage, and user authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional web browsers are used to interpret web applications, then basic document markup interpretation is provided, but security policy enforcement and secure operation control are insufficient
Solution Approach 1:
The browser is divided into distinct functional modules: a web browser core unit for basic interpretation, a network policy enforcement unit for communication control, a storage policy enforcement unit for data access control, and an ancillary policy enforcement unit for authentication. Each module operates independently to enforce specific security policies, allowing comprehensive security enforcement without requiring complete system redesign.
Solution Approach 2:
Policy enforcement units act as intermediary layers between the web application logic and the underlying system resources (network facility, storage facility, authentication mechanisms). These intermediaries intercept and control access requests, enforcing security policies without requiring changes to the web applications themselves, thus maintaining reliability while managing complexity through clear separation of concerns.
2Ease of operation
If web applications are delivered to mobile client devices for business operations, then accessibility and mobility are improved, but secure operation and policy compliance become insufficient
Solution Approach 1:
Security policies are acquired and configured in advance before web applications execute on mobile devices. The policy enforcement units are pre-loaded with network policies, storage policies, and authentication requirements, enabling automatic enforcement during application operation without requiring real-time security decisions, thus ensuring reliable secure operation while maintaining ease of mobile access.
Solution Approach 2:
The browser automatically enforces security policies without requiring manual intervention from users or administrators during operation. The policy enforcement units autonomously control network access, storage operations, and authentication processes based on pre-configured policies, allowing mobile users to access web applications conveniently while security is automatically maintained through self-enforcing mechanisms.
Data Source
AI summary
A web browser that includes a network policy enforcement unit, a storage policy enforcement unit, and an ancillary policy enforcement unit is disclosed. The network policy enforcement unit controls communications between application logic of a web application and data communication APIs. The storage policy enforcement unit controls access between the web application logic and persistent storage APIs. The ancillary policy enforcement unit controls user authentication of the web application logic.


