Disposable browsers and authentication techniques for a secure online user environment
Disclosed herein are systems and methods that allow for secure access to websites and web-based applications and other resources available through the browser. Also described are systems and methods for secure use and retention of user credentials, as well as methods for dynamic authentication of users and integrity checking of service providers in online environments. Thus, described in the present specification are systems and methods for constructing and destroying private, secure, browsing environments (a secure disposable browser), insulating the user from the threats associated with being online for the purposes of providing secure, policy-based interaction with online services.
1. A secure system for enabling access to web content using disposable browsers, the secure system comprising:
a memory comprising computer instructions; and
an application server comprising a hardware processor associated with a computing device, wherein the hardware processor is operable to:
establish a secure environment for operating a disposable browser session;
initiate the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device executing a thin client process and located externally to the secure system;
configure the disposable browser session with session-specific data associated with the disposable browser session;
receive first data from the client device, the first data being associated with a web content request initiated on the disposable browser displayed on the client device;
communicate with a remote server associated with the web content request;
execute a web command associated with the web content request;
transmit, to the client device, second data associated with the web command or the web content request, wherein the second data comprises image data;
receive, from the client device, a user interaction with the image data displayed on the client device;
transmit, to the remote server, third data associated with the user interaction with the image data displayed on the client device; and
dispose, at an end of the disposable browser session, the session-specific data associated with the disposable browser session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
2. The secure system of claim 1 , wherein the disposable browser session is initiated by the client device or by the secure system.
3. The secure system of claim 1 , wherein the disposable browser session is ended by the client device or by the secure system.
4. The secure system of claim 1 , wherein the session-specific data is associated with the disposable browser.
5. The secure system of claim 1 , wherein the session-specific data is associated with a user preference.
6. The secure system of claim 1 , wherein the receiving the first data from the client device occurs before the establishing the secure environment.
7. The secure system of claim 1 , wherein the receiving the first data from the client device occurs after the establishing the secure environment.
8. The secure system of claim 1 , wherein the receiving the first data from the client device occurs before the initiating the disposable browser session.
9. The secure system of claim 1 , wherein the receiving the first data from the client device occurs after the initiating the disposable browser session.
10. The secure system of claim 1 , wherein the web command is received from the remote server.
11. The secure system of claim 1 , wherein the secure environment is disposed of at the end of the disposable browser session.
12. The secure system of claim 1 , wherein the computer instructions are associated with performing a user authentication operation for a user of the client device, wherein the user authentication operation is associated with enabling the user of the client device to access an application or a page associated with the web content request.
13. The secure system of claim 1 , wherein the secure system is operable to remotely control the disposable browser.
14. The secure system of claim 1 , wherein the disposable browser session is insulated from other disposable browser sessions.
15. The secure system of claim 1 , wherein the computer instructions are associated with performing a user authentication operation for the client device or for a user of the client device.
16. A method for enabling access to web content using disposable browsers, the method comprising:
establishing, using one or more computing device processors, a secure environment for operating a disposable browser session;
initiating, using the one or more computing device processors, the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device executing a thin client process and located externally to the secure system;
configuring, using the one or more computing device processors, the disposable browser session with session-specific data associated with the disposable browser session;
receiving, using the one or more computing device processors, first data from the client device, the first data being associated with a web content request initiated on the disposable browser;
communicating, using the one or more computing device processors, with a remote server associated with the web content request;
executing, using the one or more computing device processors, a web command associated with the web content request;
transmitting, to the client device, second data associated with the web command or the web content request, wherein the second data comprises image data;
receiving, from the client device, a user interaction with the image data displayed on the client device;
transmitting, to the remote server, third data associated with the user interaction with the image data displayed on the client device; and
disposing, using the one or more computing device processors, at an end of the disposable browser session, the session-specific data associated with the disposable browser session,
wherein identification information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server.
17. The method of claim 16 , wherein the disposable browser session is initiated or ended by the client device or by the secure system.
18. The method of claim 16 , further comprising authenticating the client device or the user of the client device to an application or a page associated with the web content request.
19. A secure system for enabling access to web content using disposable browsers, the secure system comprising one or more hardware processors configured to:
establish a secure environment for operating a disposable browser session;
initiate the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device located externally to the secure system;
configure the disposable browser session with session-specific data associated with the disposable browser session;
receive first data from the client device, the first data being associated with a web content request initiated on the disposable browser displayed on the client device;
communicate with a remote server associated with the web content request;
execute a web command associated with the web content request;
transmit, to the client device, second data associated with the web command or the web content request, wherein the second data comprises image data;
receive, from the client device, a user interaction with the image data displayed on the client device;
transmit, to the remote server, third data associated with the user interaction with the image data displayed on the client device; and
dispose, at an end of the disposable browser session, the session-specific data associated with the disposable browser session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
20. The secure system of claim 19 , wherein authentication information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server.