Application controlled encryption of web browser data
View Patent ↗A browser cache-securing component facilitates online communication of confidential data, such as for financial information, purchasing transactions, or user identification. Caching webpages for subsequent presentation enhances user productivity and efficiency while reducing burdens on network resources. Yet, the security risks of intrusions into cache memory are mitigated by retaining encrypted data in cache memory without prior decryption. A modest overhead in decrypting when and if the webpage is to be presented again gains a security and privacy advantage without taking away functionality. Decrypted versions of confidential data can thereby be relegated to volatile memory. Upon termination of a session, a session key shared by a network server is deleted, preventing subsequent decryption. Executing the browser cache-securing component in a virtual machine environment allows multiple browser types to benefit from the security feature.
1. A method for improving security of confidential data cached by a web browser, comprising:
receiving a decryption component that facilitates secure communication of confidential data from a server;
receiving a webpage containing encrypted content;
caching the webpage and the encrypted content;
presenting confidential data by decrypting the encrypted content with the decryption component; and
deleting the decryption component from the web browser upon a session terminating event, wherein the session terminating event comprises receiving a reset session key from the server.
2. The method of claim 1 , wherein the presenting confidential data is in response to a user command to backup to a previously presented webpage.
3. The method of claim 1 , wherein the decryption component comprises a session key and decryption software.
4. The method of claim 3 , wherein deleting the decryption component comprises deleting the session key.
5. The method of claim 1 , wherein the session terminating event comprises closing a browser that presents the confidential data.
6. The method of claim 5 , wherein the decryption component comprises a session key and decryption software, deleting the decryption component comprises deleting the session key.
7. The method of claim 1 , wherein the session terminating event comprises a time expiration condition.
8. The method of claim 1 , further comprising sending authentication credentials with secure hypertext transport protocol utilizing secure socket layer (SSL) encryption and receiving a unique set cookie as the session key.
9. An apparatus that improves security of confidential data, comprising:
at least one processor coupled to a memory, the processor executing:
a first set of codes that cause a client computer to receive a decryption component for secure communication of confidential data from a server;
a second set of codes that cause the client computer to receive a webpage containing encrypted content;
a third set of codes that cause the client computer to cache the webpage and the encrypted content;
a fourth set of codes that cause the client computer to present confidential data by decrypting the encrypted content with the decryption component; and
a fifth set of codes that cause the client computer to delete the decryption component upon a session terminating event, wherein the session terminating event comprises receiving a reset session key.
10. The apparatus of claim 9 , wherein the presenting confidential data is in response to a user command to backup to a previously presented webpage.
11. The apparatus of claim 9 , wherein the decryption component comprises a session key and decryption software.
12. The apparatus of claim 11 , wherein deleting the decryption component comprises deleting the session key.
13. The apparatus of claim 9 , wherein the session terminating event comprises closing a browser that presents the confidential data.
14. The apparatus of claim 13 , wherein the decryption component comprises a session key and decryption software, deleting the decryption component comprises deleting the session key.
15. The apparatus of claim 9 , wherein the session terminating event comprises a time expiration condition.
16. The apparatus of claim 9 , further comprising sending authentication credentials with secure hypertext transport protocol utilizing secure socket layer (SSL) encryption and receiving a unique set cookie as the session key.
17. An apparatus that improves security of confidential data, comprising:
a networked computing platform;
a browser component executed by the networked computing platform for rendering a webpage;
a cache memory that caches a decryption component, a session key, a webpage containing encrypted content, and a decryption algorithm,
wherein the browser utilizes the cache memory to present confidential data by decrypting the encrypted content with the decryption component in response to a user command to return to a previously rendered webpage, and to delete the session key to prevent subsequent decryption of the encrypted content in cache memory, and wherein the browser deletes the session key based at least in part upon a reset session key received by the browser.
18. The apparatus of claim 17 , wherein the browser deletes the session key based at least in part upon a detected interruption in a connection to a server hosting the webpage.