Remote Browser Intermediary for Secure Content Filtering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer security solutions fail to effectively prevent the exfiltration of protected information and unauthorized access to unpermitted content, particularly in online environments, where users may inadvertently or maliciously transmit sensitive data.
Innovation Solution
A system that operates as a protective layer between end-user devices and remote content sources, mimicking user interactions on a local browser to a remote browser, thereby restricting and modifying content transmissions to prevent unauthorized data exchange, using a central controller to analyze and filter user inputs and content, and applying permissions based on user profiles and contextual factors.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If browser isolation is used to process information remotely, then user device security is improved, but access convenience deteriorates
Solution Approach 1:
A remote browser running in an isolated environment acts as an intermediary between the user device and the internet. The remote browser executes web content in a sandboxed remote environment, preventing direct interaction between potentially harmful online content and the local user device. User inputs are transmitted to the remote browser, and rendered outputs are sent back, maintaining security while enabling web access.
Solution Approach 2:
The browsing function is segmented from the user device and relocated to a remote server. The remote browser environment is separated from the local operating system, creating distinct security zones. This segmentation allows the user device to remain secure while the remote browser handles potentially risky web content execution.
2Reliability
If content filtering is applied to prevent unpermitted information, then security is improved, but information access completeness deteriorates
Solution Approach 1:
The content filtering system dynamically adjusts what information is permitted based on user profiles, contextual factors, and security policies. Rather than static blocking, the system evaluates each piece of content against multiple criteria including user authentication level, time of access, and content type, allowing legitimate information to pass while blocking threats.
Solution Approach 2:
The system changes parameters such as user authentication level, session context, and content classification to determine permission decisions. By adjusting these parameters dynamically, the system can permit or block specific content based on the current security context, maintaining both security and information access where appropriate.
Data Source
AI summary
Systems, methods, and computer-readable mediums are disclosed for preventing access to unauthorized content by users. A system performs operations, including receiving, from a remote browser, a set of information for generating a web page. The operations also include, based on the set of information, identifying content to be generated in the web page. The operations further include determining that a user associated with a local browser lacks permission to access a subset of the content. Additionally, the operations include, responsive to determining that the user lacks permission to access at least the subset of the content, generating a set of media instructions, such as text, audio, images, and video, excluding at least the subset of the content. Moreover, the operations include transmitting the set of media instructions to the local browser.