VPN Client Cookie Deletion for Intranet Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security protocols for corporate networks are vulnerable to cookie-injection and cookie-replaying attacks, particularly when public-facing services and private intranets share the same domain, as current mitigation methods require significant changes to systems and codebases, and not all web browsers support stricter protocols.
Innovation Solution
A VPN client that receives session requests, retrieves and deletes cookies based on specified criteria during session initialization and termination, preventing malicious cookies from accessing private intranets by deleting all cookies matching the criteria before establishing or terminating a VPN communication session.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If stricter transmission protocols or more complex cookies are used to mitigate security risks, then security reliability is improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The patent extracts the cookie deletion function from the complex protocol negotiation process and implements it as a separate, standalone mechanism in the VPN client. This allows the system to mitigate security risks through cookie management without requiring changes to transmission protocols or cookie structures, thereby improving security reliability while avoiding increased system complexity
Solution Approach 2:
The VPN client acts as an intermediary between the web browser and the network traffic. It intercepts HTTP requests and responses to automatically delete cookies matching specified criteria before requests reach the network and after responses return. This intermediary approach provides security mitigation without requiring changes to the browser or server-side protocols
2Reliability
If stricter transmission protocols or more complex cookies are used to mitigate security risks, then security reliability is improved, but ease of operation and compatibility decrease
Solution Approach 1:
The VPN client implements self-service by automatically deleting cookies based on pre-configured criteria without requiring user intervention. The system monitors network traffic, identifies cookies matching the deletion criteria, and removes them automatically. This maintains ease of operation while improving security reliability through automated protection against cookie-based attacks
3Reliability
If stricter transmission protocols or more complex cookies are used to mitigate security risks, then security reliability is improved, but browser compatibility decreases
Solution Approach 1:
The patent moves the security mitigation function from the protocol/cookie dimension to the VPN client dimension. Instead of modifying transmission protocols or cookie structures (which would require browser support), the solution operates at the VPN client level where it can directly manipulate network traffic and cookie data regardless of browser implementation, ensuring broad compatibility while maintaining security reliability
Data Source
AI summary
The present disclosure is drawn to systems, methods, and computer-readable media for mitigating cookie-injection and cookie-replaying attacks using a VPN client. The VPN client receives a session request regarding access to a private intranet. In response to the request, the VPN client retrieves cookie deleting criteria, and deletes all cookies which satisfy the cookie deleting criteria. Once all cookies satisfying the cookie deleting criteria are deleted, the VPN client proceeds with the session request.