Layered Frame Isolation for Malicious Web Page Prevention

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Web pages pose a vulnerability for network attacks and malicious file downloads, necessitating enhanced systems to prevent access to computing resources by potentially malicious web pages.

Innovation Solution

Implementing a layered frame isolation (LFI) mechanism in web browsers to render potentially malicious web pages in a sandboxed frame structure, controlling resource access through browser extensions without modifying the browser or installing additional systems.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If web pages are loaded directly in the browser, then user access and viewing is enabled, but security vulnerabilities and malicious resource access occur

Engineering Contradiction:

ImprovesecurityVSAvoidweb page access

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent divides the web page rendering process into separate sandboxed frames within the browser. Each frame operates in an isolated environment with restricted access to system resources, preventing malicious code from affecting the entire browser or host system while still allowing the web page to be viewed and interacted with normally

Inventive Principle:

Principle #1Segmentation

2Reliability

If sandboxed frame structure is implemented, then resource access control is improved, but browser complexity increases

Engineering Contradiction:

Improveresource access controlVSAvoidbrowser structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements nested sandboxed frames within the browser architecture, where frames can contain other frames in a hierarchical structure. This nesting approach allows for layered security isolation while reusing the same browser infrastructure, thereby controlling complexity through structured organization rather than requiring entirely separate systems

Inventive Principle:

Principle #7Nested doll (Nesting)

3Ease of manufacture

If browser extension is used for isolation, then system modification is avoided, but isolation effectiveness may be limited

Engineering Contradiction:

Improveimplementation simplicityVSAvoidisolation effectiveness

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The patent applies sandboxing measures preliminarily, before the web page is fully loaded or executed. By pre-configuring the sandboxed frame structure and resource access restrictions in advance, the system ensures that even if the web page contains malicious code, it cannot access restricted resources from the outset, maintaining both ease of implementation through extensions and effectiveness of isolation

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12464009B2Malicious document prevention mechanism

Publication Date: 2025.11.04 FORTINET INC

AI summary

A system is disclosed. The system includes at least one physical memory device and one or more processors coupled with the at least one physical memory device to receive an action indicating that a uniform resource locator (URL) may be malicious, redirect to a layered frame isolation (LFI) page within a browser, wherein the LFI comprises an extension page in the browser to provide isolation for the URL and display the LFI page.