Cloud-Hybrid Browser Tab Isolation via Dynamic Execution Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current web browsers present a potential attack surface for malware due to their resource-intensive operations, and existing security measures like remote desktop technologies do not adequately address security risks while maintaining user experience.
Innovation Solution
A computing device with a tab manager, cloud connector, and display engine that streams tab content from a cloud server to a local browser, allowing for hybrid execution of browser tabs locally or remotely based on user input and resource availability, while isolating execution with virtualization or container isolation to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If web browsers execute resource-intensive operations locally, then user experience and performance are improved, but security risks and malware attack surface increase
Solution Approach 1:
The patent segments browser tab execution into two distinct modes: local execution for standard browsing tasks and cloud execution for resource-intensive or potentially malicious tasks. The tab manager component dynamically determines which mode to use for each tab, allowing the system to maintain security by isolating risky operations in the cloud while preserving local performance for normal operations.
Solution Approach 2:
The patent introduces a cloud server as an intermediary between the user's local device and resource-intensive or potentially harmful web content. The cloud server executes browser tabs remotely and streams the rendered content back to the local device, acting as a buffer that protects the local system from malware while maintaining user access to web applications.
2Ease of operation
If all browser tabs are executed locally, then user experience is maintained, but local computing resources are consumed
Solution Approach 1:
The patent implements dynamic tab execution strategy where the system automatically switches between local and cloud execution modes based on real-time conditions. The tab manager monitors resource availability, tab characteristics, and security requirements to dynamically determine the optimal execution location for each tab, allowing the system to adapt to changing conditions and optimize resource usage.
Solution Approach 2:
The patent applies different execution qualities to different tabs based on their specific requirements. Standard tabs that are secure and resource-light execute locally with full interactivity, while resource-intensive or suspicious tabs execute in the cloud with streamlined functionality. This differentiated approach ensures that each tab receives the appropriate level of local resource allocation.
3Reliability
If browser tabs are executed in the cloud, then security is improved and local resources are saved, but user experience and interactivity may be reduced
Solution Approach 1:
The patent segments cloud-executed tabs into different interaction modes: full interactivity mode for trusted cloud tabs and streamlined mode for untrusted or resource-constrained tabs. The tab manager determines the appropriate mode based on security assessments, allowing users to maintain natural browsing interactions with verified sites while accepting simplified functionality for potentially harmful content.
Solution Approach 2:
The system implements automatic security assessment and execution mode selection without requiring user intervention. The tab manager automatically evaluates each tab's security requirements and resource needs, making intelligent decisions about cloud versus local execution and appropriate interaction levels, thereby maintaining security and optimizing resources without degrading user experience through manual configuration.
Data Source
AI summary
Technologies for cloud-hybrid remote browsing include a client device in communication with a cloud server. The client device opens browser tab in a web browser and opens a secure connection with a cloud server. The cloud server generates tab content for a web site with a browser engine and streams the tab content to the client device. The client device renders the tab content in the browser tab. The tab content may be serialized drawing commands or bitmap data. The client device may execute certain browser tabs locally, and may determine a hybrid tab strategy that indicates whether to execute each browser tab locally or with the cloud server. The hybrid tab strategy may be based on available computing resources of the client device. Other embodiments are described and claimed.