When it comes to running a browser application in kiosk mode, or any other software on a terminal, special security requirements have to be met. There must be no way evil users could get control over the system. For applications running inside the browser this means:
- Users should be detained from closing the browser window
- Users must not be able to start or terminate any other application
- It is wise to prevent users from navigating to unwanted URLs, e.g. away from your application
Even though you can start your browser in fullscreen mode, e.g. with “–kiosk” parameter for Google Chrome, you cannot configure it in a way to prevent users from closing it down and gaining access to the operating system. Additional software is required, to limit keyboard input and user permissions. Being compatible with most Windows distributions, Internet Kiosk Pro is a pretty good and highly customizable Software for public terminals.
Basically, the software allows to:
- start the terminal in kiosk mode, with restricted access rights
- disable keys
- define shortcuts to programs or web-pages the users can access
- set the kiosk’s appearance (show/hide windows taskbar etc.)
- set security restrictions like disallowing downloads, hiding hard disks etc.
The software has a built-in safe Web-browser wich can be highly customized. You can limit the accessible URLs, start it in full screen by default, prevent users from closing the browser or adding new tabs or windows, hide navigation bars and border and more.
When all wanted options are set, the kiosk can be blocked. The system reboots in kiosk mode, with all security restrictions applied. The only way to gain control over the system when in kiosk mode is using a master-key-combination. By pressing a specific key-combination (can be set in the options) the administrator is presented an input field with username/password. Only after entering this credentials control over the system can be gained.
Limitations:
The built-in safe Web-browser cannot be customized in a way to completely hide the tab bar and the information bar. In case you need a full-screen application without any tabs etc. you have to use a different browser. With its fast javascript engine and advanced HTML 5 readiness Google Chrome is highly suitable for such applications.
As the browser’s behavior cannot be customized from within the kiosk software, more configuration has to be carried out by hand:
- Start Google Chrome in full-screen mode by adding the –kiosk parameter to the shortcut, i.e. ‘path/to/google_chrome/chrome.exe –kiosk. Set the application to automatically start when the system boots. This can be done in the kiosk software admin panel.
- Deactivate all keys that might be used for closing down the browser, adding windows etc. in the kiosk software. You should at least deactivate the keys F1 – F12, Ctrl left, Ctrl right and tab in the kiosk software. Be careful the deactivated key is not part of the master key combination!
- In the browser Settings go to Options->Details and uncheck the boxes which might produce unwanted popups on the screen like offering content translations etc.
- While the Web safe browser allows to block specific URLs and domains, when using a different one you have to use your own proxy server or browser plugin if you want to prevent users from surfing to unwanted URLs.
