Managed Browser Extension for Unmanaged Enterprise Web Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for securing enterprise content fail to allow access using third-party web browsers, as UEM systems cannot determine device security, and users often engage in poor browsing habits that compromise security.
Innovation Solution
A UEM system provides a browser extension that authenticates users and verifies device compliance through an identity manager, using tokens and policies, and recommends security-enhancing extensions based on browsing habits.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If users are restricted to managed web browsers for accessing enterprise content, then device security and compliance monitoring are improved, but user flexibility and access convenience deteriorate
Solution Approach 1:
The patent introduces a browser extension as an intermediary component that bridges unmanaged browsers and the UEM system. The extension acts as a mediator to capture browsing data, transmit it to the UEM server, and enable authentication without requiring the entire browser to be managed. This resolves the contradiction by allowing users to access enterprise content through their preferred unmanaged browsers while maintaining security monitoring through the extension intermediary.
Solution Approach 2:
The patent segments the security management function from the browser itself by using a separate browser extension. Instead of managing the entire browser, only the extension is installed on the user's device, which collects security-relevant data and communicates with the UEM server. This segmentation allows enterprise content access through unmanaged browsers while maintaining centralized security control.
2Reliability
If UEM system monitors all browsing activity through managed browsers, then security monitoring is improved, but system complexity and data processing requirements deteriorate
Solution Approach 1:
The patent extracts the security monitoring function from the browser management system by using a lightweight browser extension that operates independently. The extension captures only essential security-related browsing data and transmits it to the UEM server, avoiding the need to manage or monitor all browsing activity through complex browser-based systems. This extraction reduces system complexity while maintaining effective security monitoring.
3Reliability
If users are provided with security extensions automatically, then browsing security is improved, but user awareness and informed choices deteriorate
Solution Approach 1:
The patent implements a feedback mechanism where the UEM server analyzes browsing data collected by the extension and provides recommendations to users about which security extensions would be beneficial. This feedback loop maintains user awareness and informed choices by presenting personalized security recommendations based on actual browsing behavior, rather than automatically imposing security measures without user knowledge.
Data Source
AI summary
Systems and methods are described for increasing web browser security on a user device managed by a device management system. In an example, the user device can use an unmanaged web browser to access secure enterprise content using a browser extension provided by the enterprise. When a user attempts to access secure content from an unmanaged browser, the device management system can communicate with the extension and a management application on the user device to authenticate the user and verify that the user device complies with certain policies. In one example, the device management system can include an extension recommendation engine that analyzes user browsing data and recommends browser extensions for the user. Based on policies, the device management system can recommend the extension to the user or force installation of the extension on the user device.