Підвищеня рівня безпеки локального сховища даних вебдодатків шляхом сегментації даних та криптографічної ідентифікації пристрою

Abstract

The paper considers an approach to increasing the security level of local data storage of web applications by using data segmentation and cryptographic identification of the user’s device. A mechanism is proposed for dividing confidential information into separate segments with their subsequent storage in different stuctures of the browser environment, which makes unauthorized access to integral data more difficult. To provide an additional level of protection, cryptographic binding of encryption keys to the parameters of the user’s device and browser is used, which allows minimizing the risks of data compromise when stealing tokens or local files of the storage. The main vulnerabilities of local web application repositories are investigated and the feasibility of using dynamic encryption and adaptive cryptographic key generation is substantiated. The implementation of the proposed approach is aimed at increasing the confidentiality, integrity and resilience of data to modern cyber threats.