| CPC G06F 21/53 (2013.01) [G06F 16/9558 (2019.01); G06F 2221/2119 (2013.01)] | 6 Claims |
|
1. A method of providing a security service, the method comprising:
receiving identification data capable of calling an application from a device of a user;
connecting to a web page of an application link corresponding to the identification data through a remote browser, by arbitrarily inputting user data as input data to an application to be executed in the remote browser if the application link is an application execution link;
confirming
whether a domain or path name included in the application link is registered in a security list or a blocking list, and
whether the connected web page or the application automatically attempts to access the device;
determining a risk of the connected web page based on a result of the confirming;
determining access authority of the application according to the determined risk;
rendering an execution screen of the application according to the determined access authority; and
streaming and transmitting the execution screen of the application to provide a user experience (UX) that is substantially the same as the device or the application installed in the device,
the method further comprising:
acquiring output data from the device and the browser installed in the device, the output data including audiovisual and tactile output data,
applying, before the rendering, the acquired output data on the web page screen to be processed in the remote browser, and
processing the webpage screen according to the audiovisual output data and the tactile output data of the output data when user operation data is acquired from the device while maintaining a link-connected state,
wherein the streaming and transmitting provides the user experience as if a series of processes are being performed in the device, the series of processes including a webpage screen processed using the audiovisual output data of the output data and a webpage screen processed using the tactile output data of the output data, and
wherein the access authority of the application is determined depending on a risk level of the executed application, by
blocking access authority to functions that can store data in a memory of the device of the user and to functions that can expose a user identification (ID) in the execution screen of the application, and
allowing access to functions that are not linked to user information.
|