Cloud Suffix Proxy for Secure DOM Text Field Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cloud applications face network security risks due to complex endpoint configurations and dynamic network addresses, making it difficult to ensure traffic security, especially with client-side code like JavaScript that requires further intervention beyond basic proxy functions.
Innovation Solution
A method and system that injects code into webpages to maintain an encryption key in the DOM, intercepts and decrypts encrypted text fields, and uses a suffix proxy to modify network addresses, ensuring secure communication by intercepting and modifying network traffic between cloud applications and client devices through a security sandbox that prevents direct access to the DOM.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If basic proxy functions are used to intercept network traffic, then traffic capture is achieved, but client-side code (JavaScript) requires further intervention making implementation challenging
Solution Approach 1:
The patent introduces a suffix proxy as an intermediary component that sits between the client device and cloud application. This proxy intercepts HTTP traffic and modifies URLs by appending suffixes to redirect traffic through a security sandbox. The intermediary handles the complexity of JavaScript intervention by providing a centralized interception point that monitors and controls network traffic without requiring deep modification of client-side code.
2Reliability
If endpoint configuration is made complex to ensure security, then security control is improved, but system complexity increases
Solution Approach 1:
The security sandbox implemented in the patent performs self-service security functions by automatically executing within a controlled environment. The sandbox isolates JavaScript execution and automatically monitors traffic patterns, eliminating the need for complex manual endpoint configurations. The system self-manages security policies, traffic filtering, and threat detection without requiring extensive administrative setup or maintenance.
3Adaptability or versatility
If dynamic network addresses are used for cloud applications, then adaptability is improved, but traffic captivation becomes difficult
Solution Approach 1:
The suffix proxy implements preliminary action by preemptively appending suffixes to URLs before traffic is sent to cloud applications. This proactive modification ensures that even dynamically generated addresses are captured and redirected through the security sandbox. The proxy intercepts HTTP requests at the application layer and modifies the destination address, ensuring traffic captivation occurs before the dynamic address can evade monitoring.
Data Source
AI summary
A method and system for securing a cloud application are provided. The method includes receiving a webpage sent to a client device from at least one cloud application; injecting a piece of code into the webpage, wherein the piece of code maintains an encryption key in a document object model (DOM) of the webpage, wherein the piece of code allows encryption of any text field in the webpage when executed by the client device; intercepting at least one encrypted text field inserted into the DOM; and modifying the DOM by decrypting each of the intercepted at least one encrypted text field and inserting each decrypted text field into the DOM.