Web Session Security via Blurred Screenshots

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current web session security mechanisms that employ timeout mechanisms result in significant data loss by logging users out and deleting typed data upon inactivity, leading to undesirable data loss.

Innovation Solution

Implementing a method where a processor sets a timer after the last user action, determines if a threshold time period has exceeded, and makes sensitive information displayed in a web application unreadable by blurring it, while capturing and displaying an altered image to maintain user context, and requiring login credentials to restore accessibility.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a timeout mechanism logs the user out after inactivity, then security is improved, but data loss occurs

Engineering Contradiction:

ImprovesecurityVSAvoiddata loss

Core Design Contradiction:

ReliabilityVSLoss of information

Solution Approach 1:

The system performs preliminary actions by capturing screenshots of the displayed information before the timeout occurs, and prepares blurred versions in advance. When timeout happens, the pre-prepared blurred images are immediately displayed, preventing both data loss and security issues simultaneously.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system creates copies of the displayed information in the form of screenshots. These copies are then blurred to create unreadable versions that replace the original readable content, thus protecting sensitive information while maintaining the ability to resume work after timeout.

Inventive Principle:

Principle #26Copying

2Reliability

If sensitive information is made unreadable during timeout, then security is improved, but user context is lost

Engineering Contradiction:

ImprovesecurityVSAvoiduser context loss

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The blurred screenshot acts as an intermediary between the readable original content and complete unreadability. It provides a visual placeholder that maintains layout and context while preventing sensitive information exposure, allowing users to quickly understand what content was displayed without seeing actual sensitive data.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system applies blurring effects that change the visual appearance of text and images, making sensitive information unreadable while preserving the overall visual structure and layout. This allows users to recognize the context and content type without being able to read actual sensitive data.

Inventive Principle:

Principle #32Color changes

3Reliability

If the system captures and displays blurred images, then data protection is improved, but device complexity increases

Engineering Contradiction:

Improvedata protectionVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system automatically captures screenshots, creates blurred versions, and displays them without requiring manual intervention. The entire process of protecting sensitive information during timeout is self-service, reducing the need for complex manual security procedures while maintaining strong data protection.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS9824235B2Web session security techniques

Publication Date: 2017.11.21 NCR VOYIX CORP

AI summary

Web session security techniques which protect displayed sensitive information. In one example embodiment, the method includes setting, by a processor, a timer following a last user action during use of a web application; determining, by the processor, that a threshold time period since the last user action exceeds a predetermined time period; and making, by the processor, displayed sensitive information unreadable.