US 2023/0403300 A1 · RENDERING CONTEXTUAL SECURITY INFORMATION DETERMINED IN-BROWSER WITH WEB PAGES OF CLOUD AND SAAS VENDORS

Abstract

A browser extension produces a single view comprising content of web pages of a target vendor requested by a customer and corresponding security information for the target vendor maintained for the customer. Fingerprints of the target vendor's web page URLs and web page elements corresponding to resources, respectively, are determined. As the web browser retrieves web pages and the customer selects web page elements that identify resources, the browser extension matches URLs and/or HTML/XML syntactic patterns of the retrieved web pages to the fingerprints to determine the security information to obtain from backend storage. The type/granularity of information that is retrieved can vary depending on the identified fingerprint match. The browser extension retrieves security information corresponding to fingerprints for which matches are identified, generates security overviews therefrom, and integrates the security overviews into the requested web pages to generate a consolidated, multi-perspective view.

Claims22

Dependent claims

A method comprising:

detecting a request for a first web page of a vendor during a login session of an account with the vendor, wherein the first web page has a first Uniform Resource Locator (URL);
based on evaluating the first URL against a plurality of fingerprints of the vendor, identifying a match between the first URL and a first fingerprint of the plurality of fingerprints;
determining a first type of security overview to generate for use of the vendor associated with the account based on the first fingerprint that the first URL matched;
retrieving first security information maintained for the account with the vendor corresponding to the first type of security overview;
and
generating a security overview of the first type from the first security information.

3 more elements

One or more non-transitory computer-readable media having program code stored thereon, the program code comprising instructions to:

detect a first event initiated by a user that has requested a first web page, wherein the first event comprises retrieval of the first web page by a web browser or selection of an element of the first web page by the user;
determine which subset of a plurality of security data and metadata maintained for an account with which the user is associated should be retrieved based on the first event;
retrieve the determined subset of security data and metadata;
and
integrate the determined subset of security data and metadata into content of the first web page for rendering.

2 more elements

An apparatus comprising:

a processor;
and
a computer-readable medium having instructions stored thereon that are executable by the processor to cause the apparatus to,
detect a request for a first web page of a vendor during a login session of an account with the vendor, wherein the first web page has a first Uniform Resource Locator (URL);
based on evaluation of the first URL against a plurality of URL patterns defined for the vendor, identify a match between the first URL and a first URL pattern of the plurality of URL patterns;
determine a first subset of security information maintained for the account to retrieve based on the first URL pattern;
and
based on retrieval of the first subset of the security information that are determined, integrate the first subset of the security information into the first web page as a security overview for content of the first web page.

5 more elements

Dependencies are inferred from the claim text.

Rendering contextual security information determined in-browser with web pages of cloud and saas vendors

Life of this patent

Rendering contextual security information determined in-browser with web pages of cloud and saas vendors

Life of this patent

Abstract

Claims22