Disposable browsers and authentication techniques for a secure online user environment
Disclosed herein are systems and methods that allow for secure access to websites and web-based applications. Also described are systems and methods for secure use and retention of user credentials, as well as methods for dynamic authentication of users and integrity checking of service providers in online environments. Thus, described in the present specification are systems and methods for constructing and destroying private, secure, browsing environments (a secure disposable browser), insulating the user from the threats associated with being online for the purposes of providing secure, policy-based interaction with online services.
1. An apparatus for enabling access to content using disposable applications, the apparatus comprising:
a memory comprising computer instructions; and
an application server comprising a hardware processor associated with a computing device, wherein the hardware processor is operable to:
establish a secure environment for operating a disposable application session;
initiate the disposable application session within the secure environment, wherein a disposable application associated with the disposable application session is displayable on a client device executing a thin client process and located externally to the apparatus;
configure the disposable application session with session data associated with the disposable application session;
receive first data from the client device, the first data being associated with a content request initiated on the disposable application displayed on the client device;
communicate with a remote server associated with the content request;
execute a command associated with the content request or received from the remote server;
transmit, to the client device, second data associated with the command or associated with the content request;
receive, from the client device, a user interaction with image data displayed on the client device, wherein the image data is rendered or generated on the client device based on the second data;
transmit, to the remote server, third data associated with the user interaction with the image data; and
dispose of or substantially delete, at or after an end of the disposable application session, the session data associated with the disposable application session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
2. The apparatus of claim 1 , wherein the disposable application session is initiated by the client device or by the apparatus.
3. The apparatus of claim 1 , wherein the disposable application session is ended by the client device or by the apparatus.
4. The apparatus of claim 1 , wherein the session data is associated with the disposable application.
5. The apparatus of claim 1 , wherein the session data is associated with a user preference, or wherein the disposable application comprises an Internet-based application.
6. The apparatus of claim 1 , wherein the receive the first data from the client device occurs before the establish the secure environment.
7. The apparatus of claim 1 , wherein the receive the first data from the client device occurs after the establish the secure environment.
8. The apparatus of claim 1 , wherein the receive the first data from the client device occurs before the initiate the disposable application session.
9. The apparatus of claim 1 , wherein the receive the first data from the client device occurs after the initiate the disposable application session.
10. The apparatus of claim 1 , wherein the command is received from the remote server.
11. The apparatus of claim 1 , wherein the secure environment is disposed of or substantially deleted at or after the end of the disposable application session.
12. The apparatus of claim 1 , wherein the computer instructions are associated with a user authentication operation for a user of the client device, wherein the user authentication operation is associated with enabling the user of the client device to access an application or a page associated with the content request.
13. The apparatus of claim 1 , wherein the apparatus is operable to remotely control the disposable application.
14. The apparatus of claim 1 , wherein the disposable application session is substantially insulated from a second disposable application session.
15. The apparatus of claim 1 , wherein the computer instructions are associated with a user authentication operation for the client device or for a user of the client device.
16. A method for enabling access to content using disposable applications, the method comprising:
initiating, using one or more hardware computing device processors, a disposable application session, wherein a disposable application associated with the disposable application session is displayable on a client device executing a thin client process;
configuring, using the one or more hardware computing device processors, the disposable application session with session data associated with the disposable application session;
receiving, using the one or more hardware computing device processors, first data from the client device, the first data being associated with a content request initiated on the disposable application;
communicating, using the one or more hardware computing device processors, with a remote server associated with the content request;
executing, using the one or more hardware computing device processors, a command;
transmitting, to the client device, second data associated with the command or associated with the content request;
receiving, from the client device, a user interaction with image data displayed on the client device, wherein the image data is generated on the client device based on the second data;
transmitting, to the remote server, third data associated with the user interaction with the image data; and
disposing of or substantially deleting, using the one or more hardware computing device processors, at or after an end of the disposable application session, the session data associated with the disposable application session,
wherein identification information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server.
17. The method of claim 16 , wherein the disposable application session is initiated or ended by the client device or by the one or more hardware computing device processors, or wherein the disposable application comprises an Internet-based application.
18. The method of claim 16 , further comprising authenticating the client device or the user of the client device to an application or a page associated with the content request.
19. An apparatus for enabling access to content using disposable applications, the apparatus comprising one or more hardware processors configured to:
establish a secure environment for operating a disposable application session;
initiate the disposable application session within the secure environment, wherein a disposable application associated with the disposable application session is displayable on a client device located externally to the apparatus;
configure the disposable application session with session data associated with the disposable application session;
receive first data from the client device, the first data being associated with a content request initiated on the disposable application displayed on the client device;
communicate with a remote server associated with the content request;
execute a command associated with the content request or received from the remote server;
transmit, to the client device, second data associated with the command or associated with the content request;
receive, from the client device, a user interaction with image data displayed on the client device, wherein the image data is rendered or generated on the client device based on the second data;
transmit, to the remote server, third data associated with the user interaction with the image data; and
dispose of or substantially delete, at or after an end of the disposable application session, the session data associated with the disposable application session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
20. The apparatus of claim 19 , wherein authentication information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server, or wherein the disposable application comprises an Internet-based application.