Application controlled encryption of web browser data

Details Application controlled encryption of web browser data Application controlled encryption of web browser data

2011-07-12

2011-07-12

Dada, Beemnet W (Department: 2435)

Information security

Prevention of unauthorized use of data including prevention...

Reexamination Certificate

active

07979909

ABSTRACT:
A browser cache-securing component facilitates online communication of confidential data, such as for financial information, purchasing transactions, or user identification. Caching webpages for subsequent presentation enhances user productivity and efficiency while reducing burdens on network resources. Yet, the security risks of intrusions into cache memory are mitigated by retaining encrypted data in cache memory without prior decryption. A modest overhead in decrypting when and if the webpage is to be presented again gains a security and privacy advantage without taking away functionality. Decrypted versions of confidential data can thereby be relegated to volatile memory. Upon termination of a session, a session key shared by a network server is deleted, preventing subsequent decryption. Executing the browser cache-securing component in a virtual machine environment allows multiple browser types to benefit from the security feature.

REFERENCES:
patent: 6006332 (1999-12-01), Rabne et al.
patent: 6199113 (2001-03-01), Alegre et al.
patent: 6754825 (2004-06-01), Lennie et al.
patent: 7143145 (2006-11-01), Seraphin
patent: 7188240 (2007-03-01), Berstis et al.
patent: 7197568 (2007-03-01), Bourne et al.
patent: 7240192 (2007-07-01), Paya et al.
patent: 2002/0004784 (2002-01-01), Forbes et al.
patent: 2002/0023208 (2002-02-01), Jancula
patent: 2003/0182357 (2003-09-01), Chess et al.
patent: 2004/0030911 (2004-02-01), Isozaki et al.
patent: 2004/0117486 (2004-06-01), Bourne et al.
patent: 2008/0123861 (2008-05-01), Chow
patent: 2009/0080663 (2009-03-01), Cherian et al.
OWASP. Testing for Logout and Browser Cache Management. http://www.owasp.org/index.php/ Web—Application—Penetration—Testing—AoC. Last accessed Jul. 29, 2008.
CNS Computing & Networking Services. Browser Security. Last accessed Jul. 29, 2008.

Affiliated with

Also associated with

Rating

Application controlled encryption of web browser data does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Application controlled encryption of web browser data, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Application controlled encryption of web browser data will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-2690387