Browser Security Engine Identifying Web Data Fragment Attributes

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing web browser security measures, such as protected mode, can cause issues with displaying web pages correctly due to the lack of information about web data fragments' attributes, leading to problems like duplicated cookie files and incorrect page operations.

Innovation Solution

A system and method that identifies unknown attributes of web data fragments by creating a unique second URL based on the initial URL, transmitting a request to the server, and determining the attributes of the data fragments using a security engine, ensuring correct web page display even in protected mode.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the browser is launched in protected mode with intercepted web data fragments, then security protection is improved, but web page display correctness deteriorates due to missing attribute information

Engineering Contradiction:

Improvesecurity protectionVSAvoidweb page display correctness

Core Design Contradiction:

ReliabilityVSManufacturing precision

Solution Approach 1:

The security application performs preliminary actions by intercepting and analyzing web data fragments before the browser is launched in protected mode. It identifies cookie files and their attributes (name, scope, domain, path) in advance, storing this information for later use when the protected browser needs to display the web page correctly without having access to the original browser's internal state.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If the security application independently identifies web data fragments, then security control is improved, but attribute identification accuracy deteriorates because certain attributes are known only to the browser

Engineering Contradiction:

Improvesecurity controlVSAvoidattribute identification accuracy

Core Design Contradiction:

ReliabilityVSMeasurement precision

Solution Approach 1:

The security application acts as an intermediary between the browser and the protected mode environment. It intercepts web data fragments from the browser, analyzes and stores their attributes, then provides this information to the protected browser. This intermediary role allows the security application to control the protection process while ensuring attribute accuracy by relying on the browser's own identification of its data fragments.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Device complexity

If cookie file scope is incorrectly identified, then security processing is simplified, but web service operation deteriorates due to duplicated cookie files and incorrect page behavior

Engineering Contradiction:

Improvesecurity processing complexityVSAvoidweb service operation

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The security application uses feedback mechanisms to verify cookie file scope identification. It analyzes the relationship between cookie files and web page URLs, using the context of where cookies are set and accessed to determine their correct scope. This feedback loop ensures that cookie files are correctly associated with their intended domains and paths, preventing duplication and ensuring proper web service operation in protected mode.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS11144636B2Systems and methods for identifying unknown attributes of web data fragments when launching a web page in a browser

Publication Date: 2021.10.12 AO KASPERSKY LAB

AI summary

Systems and methods for identifying unknown attributes of web data fragments during operation of a web browser with a web page. A security engine allows for the correct displaying of a web page in a browser when no information is available about the attributes of web data fragments for the web page by identifying the attributes of web data fragments for the web page.