Remote Browser Isolation for Credential-Safe Web App Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in providing secure and efficient privileged access to web applications hosted in disparate environments, such as SAAS clouds and private networks, due to the lack of integration with Single Sign-On solutions, the need for separate access control configurations, and the risk of data leakage during remote access, especially when sharing access with third parties.
Innovation Solution
A universal privileged access management solution utilizing Remote Browser Isolation (RBI), Zero Trust Network Access (ZTNA), and password vaults for web applications that do not support SSO, and leveraging ID brokers for those that do, ensuring secure access through cloud-based software services with data loss prevention features to prevent credential disclosure and data leakage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional remote desktop sharing solutions like VNC are used to share web application access with third parties, then the user can provide access to the web application, but the entire computer's access rights are disclosed to the third party instead of just the specific web application
Solution Approach 1:
The system segments the remote access capability from the entire desktop environment and isolates it to only the specific web application. This is achieved by creating a separate remote browsing session that connects exclusively to the target web application, preventing third parties from accessing other applications or system resources on the user's computer.
Solution Approach 2:
The system introduces a remote browsing session as an intermediary layer between the third party and the web application. This intermediary session is hosted on the user's device but accessed remotely, allowing third parties to interact with the web application without establishing direct access to the user's computer or other applications.
2Adaptability or versatility
If privileged accounts are used to access critical digital assets in web applications, then access to critical resources is enabled, but the credentials for these privileged accounts are disclosed to users introducing security risks
Solution Approach 1:
The system creates a remote browsing session that copies the web application interface and functionality to a remote environment. Instead of sharing privileged credentials directly with users, the system replicates the access experience in a controlled remote session where credentials remain secured on the server side, eliminating the need to disclose sensitive authentication information.
3Adaptability or versatility
If separate access control configurations are provisioned for each disparate hosted application, then each application can be accessed with appropriate controls, but IT administration expense and management complexity increase
Solution Approach 1:
The system implements a universal remote browsing platform that can access multiple disparate web applications through a single unified interface. Instead of requiring separate access control configurations for each application, the remote browsing session provides a consistent method for securely accessing any web application, simplifying IT administration while maintaining application-specific security policies.
Data Source
AI summary
Methods and systems of providing a universal privileged access management solution to enable users to securely share web applications through remote browser isolation (RBI). The web applications may be hosted in a SAAS (Software As A Services) cloud or in a private network. For privileged access of web applications that do not support SSO, the universal privileged access management solution implements cloud-based software services including Remote Browser Isolation (RBI), Zero Trust Network Access (ZTNA) and password vault. For privileged access of web applications that support SSO, the universal privileged access management solution implements cloud-based software services including Remote Browser Isolation (RBI) and ID brokers. In the access authentication process, by leveraging the data loss prevention (DLP) feature of RBI, the actual access credentials for accessing web applications are not disclosed to the user for mitigating security risks.