Secure Webpage Isolation for Sensitive Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing sophistication of websites and the use of script libraries lead to vulnerabilities where sensitive data entered by users can be accessed and compromised by malicious scripts, resulting in data breaches and security issues.
Innovation Solution
Implementing a secure webpage with a different origin than the main webpage, where sensitive data is sent directly to a secure server, bypassing the main webpage and its scripts, thereby preventing access by script libraries and ensuring secure communication of the data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If script libraries are used to improve user experience and functionality on websites, then website sophistication and user experience are improved, but security vulnerabilities increase allowing malicious scripts to access sensitive data
Solution Approach 1:
The webpage is segmented into multiple iframes with different origins. The main webpage (origin1.com) contains general functionality scripts, while the secure data collection section is isolated in a separate iframe (origin2.com). This segmentation allows script libraries to enhance user experience on the main page while preventing them from accessing sensitive data in the isolated secure iframe, thus resolving the contradiction between functionality and security.
2Ease of operation
If sensitive data is collected on the main webpage, then data collection functionality is simplified, but data becomes accessible to malicious scripts running on the same page
Solution Approach 1:
A secure iframe acting as an intermediary is introduced between the user and the sensitive data collection process. The iframe with a different origin (origin2.com) serves as a protected medium that accepts sensitive data submissions while being inaccessible to scripts on the main webpage. This intermediary approach maintains ease of operation for users while ensuring data protection through origin-based isolation.
3Reliability
If a secure iframe with different origin is used to protect sensitive data, then data security is improved, but device complexity and implementation difficulty increase
Solution Approach 1:
The secure iframe is nested within the main webpage structure, creating a hierarchical arrangement where the protected data collection form (origin2.com) is embedded inside the main page (origin1.com). This nesting approach allows the secure component to be integrated into the existing webpage layout without requiring a complete structural overhaul, thus managing complexity while maintaining security through origin isolation.
Data Source
AI summary
According to examples, an apparatus may include a processor and a computer readable medium on which is stored machine readable instructions that may cause the processor to receive a request for a webpage from a web browser. The processor may send webpage code of the webpage to the web browser and the webpage may load a secure webpage for a sensitive data field that is separate from the webpage. A secure server may provide the secure webpage, which may correspond to an identifier that points to the secure server. By receiving the sensitive data into the sensitive data field of the secure webpage, the sensitive data may be protected from a script loaded in the webpage. In addition, the processor may receive the sensitive data from the secure server.