Secure Element Extension for Web App Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web applications executing in web browsers can bypass client-side encryption, accessing and leaking sensitive data, even when using remote data storage providers, due to their access to the Document Object Model (DOM) and potential malicious code.
Innovation Solution
Implementing secure elements within the web browser using an extension component that manages client-side encryption and decryption, replacing insecure elements with secure container elements and subdocuments, and configuring the DOM API to restrict access to ensure only the extension component can handle clear data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If web applications execute in the web browser with access to DOM, then web application functionality and user interaction are improved, but data security deteriorates as malicious code can access and leak sensitive data
Solution Approach 1:
The patent segments the data storage and access mechanism by introducing secure container elements that are distinct from regular DOM elements. Sensitive data is stored in encrypted form within these secure containers, which are implemented as separate DOM elements with restricted access controls. This segmentation allows web applications to interact with data through controlled interfaces while preventing direct access to the underlying sensitive information.
Solution Approach 2:
The patent introduces secure container elements as intermediary components between web applications and sensitive data. These containers act as mediators that provide controlled access to encrypted data through DOM API operations while preventing web applications from directly accessing or exposing the underlying sensitive information. The secure containers translate application requests into controlled decryption and access operations.
2Object-affected harmful factors
If client-side encryption is implemented, then data security is improved, but web applications can still bypass encryption and access clear data through DOM access, causing data security to deteriorate
Solution Approach 1:
The patent merges encryption functionality directly into the DOM element structure by implementing secure container elements that combine encrypted data storage with cryptographic operations. The encryption and decryption operations are integrated into the element's internal mechanisms, ensuring that sensitive data remains encrypted throughout its lifecycle and is only decrypted within the controlled environment of the secure container.
Solution Approach 2:
The patent applies different security qualities to different parts of the data structure. Regular DOM elements maintain standard accessibility for non-sensitive data, while secure container elements implement enhanced encryption and access controls for sensitive information. This local differentiation of security properties allows web applications to access unencrypted data normally while sensitive data within secure containers remains protected throughout the application lifecycle.
3Object-affected harmful factors
If secure container elements with restricted access are implemented, then data security is improved, but device complexity increases due to additional encryption and decryption operations
Solution Approach 1:
The patent implements self-service mechanisms within secure container elements that automatically manage encryption and decryption operations. The secure containers handle their own cryptographic operations, key management, and access control without requiring external intervention or complex configuration. This self-management approach reduces the overall system complexity by encapsulating cryptographic complexity within the container elements themselves.
Solution Approach 2:
The patent creates secure container elements that serve multiple functions: they act as standard DOM elements for web application interaction, provide encrypted data storage, perform cryptographic operations, and enforce access controls. By combining these multiple functions into a single unified component, the patent reduces system complexity compared to implementing separate mechanisms for each function.
Data Source
AI summary
Various examples are directed to systems and methods for executing a web application with client-side encryption. A web browser can receive a document comprising a plurality of data elements including a secure element that comprises an encrypted value. An extension component may generate a secure container element to replace the secure element. The extension component can also insert a subdocument into the secure container element. The web browser may be configured to prevent web applications from accessing the subdocument. The extension component may also decrypt the encrypted value to generate a clear value and write the clear value to the subdocument. The web browser may render the document using the clear value.