Browser Sandbox Segmentation for Secure File Downloads
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sandbox technology in browsers limits user convenience by making temporary modifications and preventing permanent file downloads or registry changes, as both framework and browser processes run within the sandbox, leading to loss of settings and unsaved files upon browser exit.
Innovation Solution
Starting a framework process outside the sandbox and intercepting the browser process to run it within the sandbox, allowing user operations and webpage access results to be saved locally while maintaining security by confining malicious scripts to a virtual environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If both framework process and browser process run within the sandbox, then system security is improved, but user convenience deteriorates due to inability to permanently save files and registry changes
Solution Approach 1:
The browser system is segmented into two independent processes: framework process running outside the sandbox for permanent operations (file saving, registry changes), and browser process running inside the sandbox for webpage rendering and script execution. This segmentation allows each process to operate in its appropriate environment, resolving the contradiction between security and convenience.
Solution Approach 2:
A communication mechanism is introduced as an intermediary between the framework process (outside sandbox) and browser process (inside sandbox). This intermediary enables coordinated operation where the framework process handles permanent operations while the browser process maintains security isolation, allowing both security and user convenience to coexist.
2Ease of operation
If framework process runs outside the sandbox, then user operation convenience is improved by allowing local saving, but security control deteriorates by creating an external process
Solution Approach 1:
The browser is divided into framework process (outside sandbox for convenience operations) and browser process (inside sandbox for security). This clear segmentation defines specific responsibilities for each process, managing the complexity through functional separation rather than monolithic architecture.
Solution Approach 2:
A communication mechanism provides feedback loops between the framework process and browser process, enabling coordinated control. The framework process can receive status information from the browser process and send control commands, managing the external process through structured feedback rather than uncontrolled operations.
3Object-affected harmful factors
If browser process runs inside the sandbox, then malicious script isolation is improved, but file download functionality deteriorates by preventing permanent file access
Solution Approach 1:
File download operations are segmented between two processes: the browser process inside the sandbox initially receives and temporarily stores downloaded files, then the framework process outside the sandbox accesses these files through the communication mechanism and saves them to permanent locations. This segmentation maintains security isolation while enabling complete file download functionality.
Solution Approach 2:
The communication mechanism serves as an intermediary for file transfer operations. The browser process inside the sandbox transfers downloaded files to the framework process outside the sandbox, which then handles permanent storage. This intermediary approach maintains security boundaries while enabling full file access functionality.
Data Source
AI summary
The disclosure includes a sandbox technology based webpage browsing method and device. A method comprises receiving an instruction for webpage browsing in a sandbox. Upon receiving the instruction, a framework process is started outside the sandbox to process an operation incurred in the framework process outside the sandbox, wherein the framework process is a first part implemented by a browser. A browser process created by the framework process is intercepted, wherein the browser process is a second part implemented by the browser. The browser process is put into the sandbox to save a webpage access result in a specified directory in the sandbox or to run a script in the webpage in a virtual environment of the sandbox.