Remote Client Content Filtering for Secure Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer security solutions fail to effectively prevent the transmission and exfiltration of protected or unpermitted information between end-user devices and remote computing systems, while allowing secure access to authorized content.
Innovation Solution
A computing system operates as a protective layer between end-user devices and remote client applications, mimicking user interactions and controlling information transmission, restricting or enhancing content based on predefined permissions, user profiles, and contextual limitations, and modifying content to exclude unpermitted portions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If browser isolation is used to protect user devices from unpermitted information, then security is improved, but the ability to access and interact with remote content is reduced
Solution Approach 1:
A remote client application serves as an intermediary between the user device and the remote computing system. The application establishes a session with the remote system, receives rendered content, and transmits it to the user device. This intermediary approach allows secure remote access while maintaining isolation protections, as the client application acts as a controlled bridge that can filter and manage content transmission.
Solution Approach 2:
The system segments the access architecture into distinct components: the remote computing system that generates content, the remote client application that manages the session and receives content, and the user device that displays content. This segmentation allows each component to operate within its security boundaries while still enabling coordinated functionality across the system.
2Loss of information
If content is transmitted from remote computing systems to user devices, then access to information is improved, but transmission of unpermitted information increases
Solution Approach 1:
The remote client application performs preliminary actions by establishing an authenticated session with the remote computing system before content transmission. The application receives and processes content in advance, allowing security policies to be applied to the content stream before it reaches the user device. This preliminary processing enables filtering of unpermitted information while preserving authorized content.
Solution Approach 2:
The system implements feedback mechanisms where the remote client application monitors content transmission between the remote computing system and the user device. By tracking what content is generated, transmitted, and accessed, the system can apply security policies dynamically, blocking unpermitted information while allowing authorized content to pass through the transmission channel.
3Reliability
If security restrictions are applied to prevent unpermitted information transmission, then security is improved, but usability and content accessibility are reduced
Solution Approach 1:
The security system employs dynamic policies that can adapt to different contexts, users, and content types. The remote client application can adjust security restrictions based on authentication levels, content classification, and user permissions. This dynamic approach allows the system to be restrictive when necessary for security while remaining permissive when content is authorized, thereby maintaining both security and content accessibility.
Data Source
AI summary
Systems, methods, and computer-readable storage mediums are disclosed that prevent users from exchanging unauthorized content with a remote server via a client application. A system receives media instructions from a client application for rendering a user interface for the remote server on a user's device. Using the media instructions, the system determines permissions for accessing content to be presented in the user interface. Based on the permissions, the system generates modified media instructions and transmits the modified media instructions to a browser of the user device.