Disposable browsers and authentication techniques for a secure online user environment
Disclosed herein are systems and methods that allow for secure access to websites and web-based applications and other resources available through the browser. Also described are systems and methods for secure use and retention of user credentials, as well as methods for dynamic authentication of users and integrity checking of service providers in online environments. Thus, described in the present specification are systems and methods for constructing and destroying private, secure, browsing environments (a secure disposable browser), insulating the user from the threats associated with being online for the purposes of providing secure, policy-based interaction with online services.
1. A system for enabling access to content using disposable browsers, the system comprising:
a memory comprising computer instructions; and
an application server comprising a hardware processor associated with a computing device, wherein the hardware processor is operable to:
establish a secure environment for operating a disposable browser session;
initiate the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device executing a thin client process and located externally to the system;
configure the disposable browser session with session data associated with the disposable browser session;
receive first data from the client device, the first data being associated with a content request initiated on the disposable browser displayed on the client device;
communicate with a remote server associated with the content request;
execute a command associated with the content request or received from the remote server;
transmit, to the client device, second data associated with the command or associated with the content request;
receive, from the client device, a user interaction with image data displayed on the client device, wherein the image data is rendered on the client device based on the second data;
transmit, to the remote server, third data associated with the user interaction with the image data; and
dispose, at an end of the disposable browser session, the session data associated with the disposable browser session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
2. The system of claim 1 , wherein the disposable browser session is initiated by the client device or by the system.
3. The system of claim 1 , wherein the disposable browser session is ended by the client device or by the system.
4. The system of claim 1 , wherein the session data is associated with the disposable browser.
5. The system of claim 1 , wherein the session data is associated with a user preference.
6. The system of claim 1 , wherein the receiving the first data from the client device occurs before the establishing the secure environment.
7. The system of claim 1 , wherein the receiving the first data from the client device occurs after the establishing the secure environment.
8. The system of claim 1 , wherein the receiving the first data from the client device occurs before the initiating the disposable browser session.
9. The system of claim 1 , wherein the receiving the first data from the client device occurs after the initiating the disposable browser session.
10. The system of claim 1 , wherein the command is received from the remote server.
11. The system of claim 1 , wherein the secure environment is disposed of at the end of the disposable browser session.
12. The system of claim 1 , wherein the computer instructions are associated with performing a user authentication operation for a user of the client device, wherein the user authentication operation is associated with enabling the user of the client device to access an application or a page associated with the content request.
13. The system of claim 1 , wherein the system is operable to remotely control the disposable browser.
14. The system of claim 1 , wherein the disposable browser session is insulated from a second disposable browser session.
15. The system of claim 1 , wherein the computer instructions are associated with performing a user authentication operation for the client device or for a user of the client device.
16. A method for enabling access to content using disposable browsers, the method comprising:
establishing, using one or more computing device processors, a secure environment for operating a disposable browser session;
initiating, using the one or more computing device processors, the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device executing a thin client process;
configuring, using the one or more computing device processors, the disposable browser session with session data associated with the disposable browser session;
receiving, using the one or more computing device processors, first data from the client device, the first data being associated with a content request initiated on the disposable browser;
communicating, using the one or more computing device processors, with a remote server associated with the content request;
executing, using the one or more computing device processors, a command;
transmitting, to the client device, second data associated with the command or associated with the content request;
receiving, from the client device, a user interaction with image data displayed on the client device, wherein the image data is generated on the client device based on the second data;
transmitting, to the remote server, third data associated with the user interaction with the image data; and
disposing, using the one or more computing device processors, at an end of the disposable browser session, the session data associated with the disposable browser session,
wherein identification information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server.
17. The method of claim 16 , wherein the disposable browser session is initiated or ended by the client device or by the one or more computing device processors.
18. The method of claim 16 , further comprising authenticating the client device or the user of the client device to an application or a page associated with the content request.
19. A system for enabling access to content using disposable browsers, the system comprising one or more hardware processors configured to:
establish a secure environment for operating a disposable browser session;
initiate the disposable browser session within the secure environment, wherein a disposable browser associated with the disposable browser session is displayable on a client device located externally to the system;
configure the disposable browser session with session data associated with the disposable browser session;
receive first data from the client device, the first data being associated with a content request initiated on the disposable browser displayed on the client device;
communicate with a remote server associated with the content request;
execute a command associated with the content request or received from the remote server;
transmit, to the client device, second data associated with the command or associated with the content request;
receive, from the client device, a user interaction with image data displayed on the client device, wherein the image data is rendered on the client device based on the second data;
transmit, to the remote server, third data associated with the user interaction with the image data; and
dispose, at an end of the disposable browser session, the session data associated with the disposable browser session,
wherein identification information associated with the client device is not transmitted directly from the client device to the remote server.
20. The system of claim 19 , wherein authentication information associated with the client device or a user of the client device is not transmitted directly from the client device to the remote server.