Client-Side Proxy Obfuscation for SaaS Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises are hesitant to use Software as a Service (SaaS) applications due to concerns about the security of sensitive data stored remotely, as they lack control over the security measures taken by SaaS providers to protect customer data from unauthorized access.
Innovation Solution
A system and method that secures user data by moving the security mechanism from remote servers to local computers, using a proxy server or private browser to obfuscate sensitive data before transmission to SaaS applications, allowing users to mark data as confidential and control access based on user roles and authorization policies, with encryption or unique identifiers used to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user data is stored at SaaS provider's remote servers, then accessibility and functionality of SaaS applications is improved, but security control and protection against unauthorized access deteriorates
Solution Approach 1:
The patent introduces a client-side proxy as an intermediary component that sits between the user's browser and the SaaS application. This proxy intercepts data before it reaches the remote server, applies security transformations (encryption, obfuscation), and forwards the secured data. The intermediary enables the user to maintain control over sensitive information while still accessing SaaS functionality, resolving the contradiction between accessibility and security control.
Solution Approach 2:
Instead of relying on the server-side to provide security measures, the patent inverts the approach by implementing security mechanisms on the client-side. The security burden is shifted from the SaaS provider's infrastructure to the user's local environment, allowing enterprises to maintain control over their data while using cloud applications.
2Reliability
If security mechanisms are implemented at remote servers, then centralized protection is improved, but user control and customization of security measures deteriorates
Solution Approach 1:
The patent segments the security function from the centralized server and distributes it to individual client devices. Each user's client can independently apply security measures based on their specific needs and organizational policies. This segmentation enables both centralized security architecture (through the proxy framework) and localized user control (through configurable security settings at each client).
Data Source
AI summary
Systems and methods for obfuscating user data in a remote web-based application are disclosed. According to one method, user inputs to a displayed web page of the remote web-based application are received at a first web browser that is used by the user, wherein at least a portion of the user inputs comprise user-inputted data intended to be stored at the web-based application. The user inputs are transmitted to a management component that is configured to interact with a second web browser that communicates with the web-based application. The management component obfuscates at least a portion of the user-inputted data and forwards the obfuscated and un-obfuscated portions of the user inputs to the second web browser, which correspondingly transmits the obfuscated and un-obfuscated portions of the user inputs to the remote web-based application.