Browser Security Control via Segmented Real-Time Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current internet browsing security solutions lack real-time control and are primarily designed for parental control, failing to effectively manage risks for generic users and do not provide interactive, dynamic security measures.
Innovation Solution
A method and system that utilize a control device and service to perform real-time security checks on web page requests, allowing or denying access based on user configuration and risk analysis, using different communication channels to prevent Man-in-the-Middle attacks and ensure security through separate network usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If real-time security control is implemented, then security reliability is improved, but device complexity increases
Solution Approach 1:
The system divides security control into separate functional components: a control device (mobile phone) that receives browsing requests, a control service that performs security analysis, and the browser extension that enforces decisions. This segmentation allows each component to be optimized independently and reduces overall system complexity while maintaining real-time security control.
Solution Approach 2:
A control service acts as an intermediary between the user's browser and the internet. The control service receives browsing requests, performs security analysis using various checks (blacklists, whitelists, risk criteria), and returns control decisions to the browser extension, which then allows or blocks access. This intermediary approach centralizes security logic and simplifies the client-side implementation.
2Ease of operation
If static parental control criteria are used, then ease of operation is improved, but adaptability deteriorates
Solution Approach 1:
The system replaces static control criteria with dynamic, real-time security analysis. Instead of relying on pre-defined parental control profiles, the control service performs ongoing security checks using multiple criteria (blacklists, whitelists, risk assessment) and adapts its decisions based on current browsing context, user behavior patterns, and detected threats. This dynamic approach maintains ease of operation while significantly improving adaptability.
Solution Approach 2:
The system implements feedback mechanisms where the control service continuously monitors browsing activity, user interactions, and security threats. Based on this feedback, the system adjusts security decisions in real-time, learns from user behavior patterns, and adapts control criteria dynamically. This feedback loop enables the system to maintain both ease of operation and high adaptability to changing security landscapes.
3Reliability
If manual security check approval is required, then security reliability is improved, but loss of time increases
Solution Approach 1:
The system implements self-service security control where the control service automatically performs security analysis and makes control decisions without requiring manual intervention. The system autonomously evaluates browsing requests against security criteria, learns from user behavior patterns, and adapts its decisions automatically. This self-service approach maintains high security reliability while eliminating the time loss associated with manual approval processes.
Data Source
Figure 1
Figure 2~4
Figure 5
AI summary
A method and system for controlling internet browsing user security is provided. A control device (120) receives, via a first communication channel, a web page request from a control agent (102) implemented in a browser (101), the browser (101) being installed in a computer device operated by a user. Then, the control device (120) requests, to a control service (130), via a second communication channel, a security level of said requested web page including a status of the user and the presence of risks in the requested web page. The control service (130) executes a security check on said requested web page by checking whether the requested web page is included in a blacklist or a whitelist and also by checking certain risk control criteria of the requested web page. Finally, in response to receipt a result of said security check, the control device (120) allows or denies access to said web page.