Secure Browser Mode for Untrusted Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users browsing on unsecured open wireless networks are vulnerable to eavesdropping and hijacking of their internet connections, as their data and login credentials can be intercepted by malicious third parties due to the lack of encryption, and existing solutions like VPNs have limitations such as requiring trust in the service provider and not addressing traffic after it leaves the VPN tunnel.
Innovation Solution
Implementing a browser mode that distinguishes between secure (HTTPS) and public (HTTP) connections by establishing separate browser windows with distinct cookie jars, where secure mode only allows HTTPS connections and blocks HTTP connections, and public mode blocks HTTPS connections and text entries to prevent data exposure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users browse on unsecured open wireless networks, then network accessibility and ease of connection are improved, but security and privacy are compromised due to eavesdropping and hijacking risks
Solution Approach 1:
The patent segments the browser into two distinct modes: secure mode and public mode. Secure mode is used for browsing on trusted networks with full functionality, while public mode is specifically designed for untrusted open wireless networks with restricted functionality (blocking text entry, logins, and downloads). This segmentation allows users to maintain security on public networks while preserving full browsing capabilities on trusted networks.
Solution Approach 2:
The patent applies different security characteristics to different browsing contexts. In public mode, the browser implements local quality changes by blocking specific functions (text entry, logins, downloads) that are permitted in secure mode. This creates a localized security enhancement specifically where needed (on public networks) without affecting browsing experience on trusted networks.
2Object-affected harmful factors
If users utilize VPN to secure connections on open wireless networks, then security against eavesdropping is improved, but device complexity and trust requirements increase
Solution Approach 1:
The patent implements self-service security by having the browser automatically detect whether it is running on a trusted or untrusted network and automatically switch between secure and public modes accordingly. Users do not need to manually configure VPN connections or trust third-party services; the browser handles security adaptation automatically based on the network environment.
Solution Approach 2:
Instead of adding encryption layers (like VPN) to protect all traffic, the patent inverts the approach by restricting functionality in public mode to prevent sensitive operations. Rather than making everything secure through encryption, it makes public mode inherently secure by design through functional restrictions, eliminating the need for VPN infrastructure.
3Ease of operation
If browser allows all HTTP connections for public mode browsing, then ease of use is improved, but security against data exposure deteriorates
Solution Approach 1:
The patent applies preliminary anti-action by proactively blocking potentially harmful functions (text entry, logins, downloads) before they can be exploited on public networks. The browser preemptively restricts these functions in public mode, preventing data exposure before it can occur, while still allowing users to browse content normally.
Solution Approach 2:
The browser performs preliminary action by detecting the network environment type (trusted vs. untrusted) before allowing sensitive operations. In public mode, the browser预先 (in advance) blocks text entry and login functions, so even if users encounter phishing sites or malicious forms, the damage cannot occur because the functions are already restricted.
Data Source
AI summary
Systems and methods described herein are directed to a browser mode that provides a secure type of browsing window or a public type of browsing window. Within the secure type of browsing window, systems and methods may enforce all connections as being over Hypertext Transfer Protocol Secure (HTTPS). Within the public type of browsing window, connections that require login, text entry, or HTTPS are prevented since session cookies and browsing activity from the public type of window may be eavesdropped by a third party. The browser provides separate cookie jars (which store the browser cookies) for the secure type window and the public type window.