Browser Security Control via Segmented Real-Time Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current internet browsing security solutions lack real-time control and are primarily designed for parental control, failing to effectively manage risks for generic users and do not provide interactive, dynamic security measures.

Innovation Solution

A method and system that utilize a control device and service to perform real-time security checks on web page requests, allowing or denying access based on user configuration and risk analysis, using different communication channels to prevent Man-in-the-Middle attacks and ensure security through separate network usage.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If real-time security control is implemented, then security reliability is improved, but device complexity increases

Engineering Contradiction:
Improvesecurity reliabilityVSAvoiddevice complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system divides security control into separate functional components: a control device (mobile phone) that receives browsing requests, a control service that performs security analysis, and the browser extension that enforces decisions. This segmentation allows each component to be optimized independently and reduces overall system complexity while maintaining real-time security control.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

A control service acts as an intermediary between the user's browser and the internet. The control service receives browsing requests, performs security analysis using various checks (blacklists, whitelists, risk criteria), and returns control decisions to the browser extension, which then allows or blocks access. This intermediary approach centralizes security logic and simplifies the client-side implementation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If static parental control criteria are used, then ease of operation is improved, but adaptability deteriorates

Engineering Contradiction:
Improveease of operationVSAvoidadaptability
Core Design Contradiction:
Ease of operationVSAdaptability or versatility

Solution Approach 1:

The system replaces static control criteria with dynamic, real-time security analysis. Instead of relying on pre-defined parental control profiles, the control service performs ongoing security checks using multiple criteria (blacklists, whitelists, risk assessment) and adapts its decisions based on current browsing context, user behavior patterns, and detected threats. This dynamic approach maintains ease of operation while significantly improving adaptability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system implements feedback mechanisms where the control service continuously monitors browsing activity, user interactions, and security threats. Based on this feedback, the system adjusts security decisions in real-time, learns from user behavior patterns, and adapts control criteria dynamically. This feedback loop enables the system to maintain both ease of operation and high adaptability to changing security landscapes.

Inventive Principle:
Principle #23Feedback

3Reliability

If manual security check approval is required, then security reliability is improved, but loss of time increases

Engineering Contradiction:
Improvesecurity reliabilityVSAvoidloss of time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system implements self-service security control where the control service automatically performs security analysis and makes control decisions without requiring manual intervention. The system autonomously evaluates browsing requests against security criteria, learns from user behavior patterns, and adapts its decisions automatically. This self-service approach maintains high security reliability while eliminating the time loss associated with manual approval processes.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3697117B1Method and system for controlling internet browsing user security
Publication Date: 2023.03.29 TELEFONICA CYBERSECURITY & CLOUD TECH S L U
  • EP3697117B1 patent drawingFigure 1
  • EP3697117B1 patent drawingFigure 2~4
  • EP3697117B1 patent drawingFigure 5

AI summary

A method and system for controlling internet browsing user security is provided. A control device (120) receives, via a first communication channel, a web page request from a control agent (102) implemented in a browser (101), the browser (101) being installed in a computer device operated by a user. Then, the control device (120) requests, to a control service (130), via a second communication channel, a security level of said requested web page including a status of the user and the presence of risks in the requested web page. The control service (130) executes a security check on said requested web page by checking whether the requested web page is included in a blacklist or a whitelist and also by checking certain risk control criteria of the requested web page. Finally, in response to receipt a result of said security check, the control device (120) allows or denies access to said web page.