Method for Secure Web Browsing

A computer-implemented method for secure web browsing, the method being executed in a secure runtime environment, the method comprising:

• receiving, by a receiver module running in the secure runtime environment, a request from a proxy module (211), the proxy module running outside the secure runtime environment, the request requesting content provided by a remote server (202);
• sending a copy of the received request to the remote server;
• receiving a response in response to the sending of the copy of the request;
• rendering content of the received response within the secure runtime environment;
• returning, by the receiver module, the rendered content and/or a description thereof and/or an indication of the rendering in the secure runtime environment to the proxy module.

A proxy processing device (204) for secure web browsing, the proxy processing device comprising:

• an interface being adapted for receiving a request submitted from a browser, the browser running in a default runtime environment, the request requesting a content provided by a remote server (202);
• a processor (208);
• a computer-readable storage medium (214) comprising instructions for operating a proxy module (211), the proxy module being adapted for:
• evaluating the received request for determining if the request is requesting insecure content and/or evaluating the requested content for determining if the requested content comprises insecure content;
• in case the request is determined to request insecure content and/or in case the requested content is determined to comprise insecure content, sending a copy of the received request to a receiver module, the receiver module running in a secure runtime environment, the secure runtime environment preventing any malicious code executed in said runtime environment to affect the default runtime environment of the browser;
• in case the request is determined to request secure content, sending a copy of the request to the remote server (202).

A secure computer system (203.1) system comprising:

• a processor (207);
• a first interface being adapted for receiving a request submitted from a proxy module, the request requesting content provided by a remote server (202);
• a secure runtime environment;
• a computer-readable storage medium (213) comprising instructions for operating a receiver module (217), the receiver module running in the secure runtime environment;
• a second interface being adapted for:
• sending a copy of the received request to the remote server;
• receiving a response in response to the sending of the copy of the received request;
• a secure browser, the secure browser and/or the receiver module being adapted for rendering content of the received response within the secure runtime environment;
• wherein the receiver module is further adapted for returning the rendered content and/or a description thereof and/or an indication of the rendering in the secure runtime environment to the proxy module.