History Protection Extension for Secure Browser Sync Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing browser synchronization technologies risk exposing sensitive information in enterprise scenarios by syncing browsing history across devices without secure access authentication, potentially revealing secure enterprise browsing sessions on non-secure networks.
Innovation Solution
A cloud-based history synchronization service and protection extension that selectively displays sensitive information based on network status, intercepting URL access requests, comparing domains against a protection list, and recording sensitive data to a secure browser history sync service, while blocking display on insecure networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If browser history is synchronized across devices without secure authentication, then browsing convenience is improved, but sensitive information security deteriorates
Solution Approach 1:
The system performs preliminary actions by authenticating the user's network status before allowing history synchronization. The extension checks whether the device is connected to a secure enterprise network before permitting browsing history to be synced, thereby preventing sensitive information exposure in advance while maintaining convenience when conditions are met
Solution Approach 2:
The history protection extension acts as an intermediary between the browser and the history synchronization service. It intercepts URL requests, checks network security status, and selectively controls which browsing data is synchronized, thereby mediating between the need for convenience and the requirement for security
2Adaptability or versatility
If browsing history is synchronized to cloud service, then accessibility across devices is improved, but exposure risk of sensitive data deteriorates
Solution Approach 1:
The system applies different quality controls to different types of browsing data based on their sensitivity. The extension identifies sensitive URLs (such as internal enterprise resources) and selectively prevents their synchronization while allowing non-sensitive browsing history to be synced, thereby achieving local quality differentiation in data protection
Solution Approach 2:
The system changes the synchronization parameter dynamically based on network security status. When a secure enterprise network is detected, history synchronization is enabled; when an insecure network is detected, synchronization is disabled. This parameter change allows the system to adapt accessibility levels according to security conditions
Data Source
AI summary
Methods and systems for selective presentation of sensitive information are described herein. A computing system may receive, from a cloud computing platform, a history protection extension. The computing system may install the history protection extension, which may cause the computing system to selectively display sensitive information based on whether or not the computing system is connected to a secure network. The computing system may identify, using the history protection extension, that the computing system is currently operating on the secure network. The computing system may intercept a URL access request. The computing system may compare a domain of the URL access request to a protection domain list. Based on identifying that the domain of the URL is included on the protection domain list, the computing system may launch the URL in a secure browser, and display, within the secure browser and based on a history data list, the sensitive information.