Embedded Browser DRM Tagging for Enterprise Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face challenges in managing access to network resources and monitoring misuse as employees use various client devices to access web applications, leading to difficulties in enforcing digital rights management and ensuring data security.
Innovation Solution
Implementing an embedded browser within a client application that uses digital rights management (DRM) tags to classify and control content access, specifying user restrictions and encryption requirements, and monitoring usage to prevent unauthorized actions such as sharing, uploading, or downloading sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional web browsers are used to access network applications, then ease of operation is improved, but digital rights management and data security control deteriorate
Solution Approach 1:
The patent embeds a custom browser engine within the client application, creating a nested structure where the browser is contained within the application sandbox. This allows the browser to provide web navigation functionality while being controlled by the application's DRM system, resolving the contradiction between ease of web access and data security control.
Solution Approach 2:
The patent introduces a DRM engine as an intermediary component that sits between the embedded browser and the network application. This intermediary enforces digital rights management policies, controls content access, and monitors usage, thereby maintaining security while allowing operational functionality.
2Adaptability or versatility
If multiple client devices are used to access network resources, then adaptability is improved, but device complexity and management difficulty worsen
Solution Approach 1:
The patent implements a universal client application with an embedded browser that can access multiple network applications across different devices. The application provides consistent DRM enforcement and security control regardless of the underlying device platform, thereby improving adaptability while managing complexity through a unified approach.
Solution Approach 2:
The patent uses a standardized client application template that can be deployed across multiple device types. By copying the same application structure with embedded browser and DRM engine to different devices, the system achieves multi-device adaptability without requiring device-specific complex implementations.
3Reliability
If DRM tags are incorporated into content, then digital rights management control is improved, but content processing complexity worsens
Solution Approach 1:
The patent incorporates DRM tags into content before it is delivered to the user. The DRM engine processes these tags in advance to determine access rights, encryption requirements, and usage restrictions. By performing this content preparation beforehand, the system achieves strong DRM control without adding complexity to the runtime content processing.
Solution Approach 2:
The DRM tags are designed to contain all necessary rights management information self-contained within the content itself. The embedded browser and DRM engine automatically read and enforce these tags without requiring complex external processing systems, thereby achieving reliable DRM control with minimal processing complexity.
4Reliability
If usage monitoring is implemented, then data security is improved, but productivity and operational efficiency worsen
Solution Approach 1:
The patent implements usage monitoring that provides feedback to the DRM engine about content access patterns and potential misuse. This feedback mechanism enables the system to detect security violations and respond appropriately while maintaining normal operational productivity through automated, background monitoring rather than intrusive intervention.
Data Source
AI summary
Embodiments described include systems and methods for incorporating tags in content of network applications. An embedded browser, which is executable on one or more processors of a client device, may detect content from a network application accessed via the embedded browser. A DRM engine of the embedded browser identifies a DRM scheme for the network application from the plurality of DRM schemes and according to the network application. The DRM engine generates a DRM tag for the content according to the DRM scheme identified for the network application. The DRM tag includes a classification of the content. The DRM engine incorporates the DRM tag into the content for managing usage of the content according to the classification.