Embedded Browser Secure Container for Data Loss Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data security is compromised when sensitive information is copied and pasted between applications without proper controls, as existing technologies lack effective mechanisms to restrict access and encrypt data in embedded browser environments.
Innovation Solution
Implementing a secure container within an embedded browser that encrypts data using a cryptographic key and applies a data loss prevention policy to manage access, ensuring that only authorized applications and devices can access and replicate sensitive information, with options for redaction if necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in a local OS clipboard for easy access, then ease of operation is improved, but data security is compromised
Solution Approach 1:
The patent introduces a secure container as an intermediary between the embedded browser and the local OS clipboard. This secure container acts as a mediator that manages data storage and retrieval operations, providing both security through encryption and ease of operation through automated copy-paste functionality. The secure container intercepts data before it reaches the local clipboard and only releases it after policy verification, thus resolving the contradiction between security and ease of use.
Solution Approach 2:
The patent implements a secure container that creates encrypted copies of data instead of storing it directly in the local clipboard. When data is copied from the embedded browser, the secure container creates an encrypted version that can be accessed by authorized applications. This copying mechanism maintains the convenience of copy-paste operations while ensuring data security through encryption, thereby resolving the technical contradiction.
2Reliability
If data access is restricted through a secure container with encryption, then data security is improved, but device complexity increases
Solution Approach 1:
The patent merges the secure container functionality with the embedded browser's existing data handling mechanisms. By integrating the secure container into the embedded browser architecture, the patent combines data storage, encryption, and access control functions into a unified system. This merging approach improves data security while minimizing the increase in device complexity by leveraging existing browser infrastructure rather than adding entirely separate security components.
3Reliability
If data loss prevention policy is applied to control data replication, then data security is improved, but ease of operation deteriorates
Solution Approach 1:
The secure container implements self-service functionality by automatically applying data loss prevention policies to data replication operations. When data is copied from the embedded browser, the secure container autonomously verifies access policies, encrypts the data, and manages the replication process without requiring manual intervention. This self-service approach maintains ease of operation for users while ensuring data security through automated policy enforcement.
Solution Approach 2:
The patent incorporates feedback mechanisms where the secure container continuously monitors data access requests and adjusts its behavior based on policy violations or authorized access patterns. This feedback system enables the secure container to maintain data security while adapting to user needs, thereby preserving ease of operation for legitimate data transfer requests while blocking unauthorized access attempts.
Data Source
AI summary
Described embodiments provide systems and methods for providing data loss prevention via an embedded browser. An interprocess communication (IPC) manager may interface with an embedded browser to control the transfer of data from a first application to a second application in accordance with a policy. The IPC manager may detect a command to store data accessed on the first application via the embedded browser and store the data onto a secure container. The secure container may be dedicated to the embedded browser. The IPC manager may subsequently detect a command to retrieve data from the secure container and to replicate the data onto the second application. The IPC manager may determine a policy to apply to the data. The policy may specify whether the data from the first application is permitted to be replicated onto the second application. The IPC manager may subsequently replicate the data on the second application.