Browser Session Storage for Private Key Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies face challenges in providing secure and convenient data encryption for web browsing environments, particularly in ensuring data remains encrypted both at rest and in transit without requiring additional software.
Innovation Solution
A system utilizing a JavaScript data encryption library in a client browser to manage encryption, where a private key is prompted from the user, an encrypted symmetric key is received and decrypted, and both encrypted web content and user data are handled, with local storage options for secure storage and deletion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted using traditional methods in web browsing environments, then data security is improved, but additional software is required which reduces ease of operation
Solution Approach 1:
The patent makes the browser itself multi-functional by integrating encryption capabilities directly into the browser engine. The browser not only renders web pages but also performs cryptographic operations (encryption, decryption, key management) natively, eliminating the need for separate encryption software and making secure operations as convenient as regular browsing.
Solution Approach 2:
The browser is made self-sufficient in handling encryption tasks. Instead of relying on external software, the browser independently manages key pairs, encrypts data in transit and at rest, and handles decryption operations. This self-service capability embeds security directly into the browsing workflow without requiring user intervention or additional tools.
2Reliability
If data is encrypted at rest in browser local storage, then data security is improved, but access convenience is reduced
Solution Approach 1:
The patent applies preliminary action by pre-generating and storing public-private key pairs in the browser before any data storage operations. The browser automatically encrypts data with the public key before storing in local storage, and decrypts with the private key when data is accessed. This preliminary setup of cryptographic infrastructure enables both secure storage and convenient access without requiring users to manually configure encryption settings each time.
Data Source
AI summary
An encryption system, method, and computer software program product provides encrypted transmission of data between a server and a web browser application on a client computing device. The system includes an Internet browser; a JavaScript data encryption library; a public key encryption algorithm; a server; and a public private key pair of the user. The JavaScript library loads in user's browser and configured with symmetric and asymmetric encryption libraries and codes. Server sends an encrypted key data to the browser/JavaScript application. The user may then provide their private key and the JavaScript library decrypts the encrypted key data and obtains a symmetric key used to encrypt the data the server transmits to the browser during a session. With the server transmitting data in encrypted form, the browser is configured to decrypt the received data using the JavaScript data encryption library and the private key of the user.