Applet Plugin Data Isolation via Platform Mediator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems for applets lack effective isolation of data and permissions, leading to security concerns when private data is accessed by services, as applets often rely on direct data access which compromises user privacy.
Innovation Solution
A data processing method and system where a plug-in with an independent data server is used, allowing the applet to establish a usage association with the plug-in through a platform server, enabling the plug-in to access its own data server for specific tasks while maintaining isolation from the applet's context and permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If private data is directly provided to services for use, then service functionality is improved, but data security deteriorates
Solution Approach 1:
The system segments data access rights by creating distinct data servers for applets and plugins, with the platform server acting as an intermediary that divides and controls access to different data resources, preventing direct access while enabling controlled service functionality
Solution Approach 2:
The platform server serves as an intermediary between applets/plugins and data servers, establishing usage associations that enable services to access required data without direct applet-data server connections, thus maintaining security while providing functionality
2Productivity
If applet directly accesses data server, then data access efficiency is improved, but data isolation deteriorates
Solution Approach 1:
The platform server acts as a mediator that receives applet access requests, determines correspondence with plugin services, and routes requests appropriately, maintaining data isolation while enabling efficient access through controlled intermediation
3Adaptability or versatility
If plugin is loaded and run, then service capability is improved, but system complexity deteriorates
Solution Approach 1:
The system dynamically loads and runs plugins only when correspondence between applet access requests and plugin services is determined, allowing service capability to be enhanced on-demand without permanently increasing system complexity
Data Source
AI summary
A data processing method, applied to an applet, includes: sending a plug-in service request to a platform server, the plug-in service request comprising a plug-in identifier configured for the platform server to establish a usage association between a plug-in corresponding to the plug-in identifier and the applet, wherein the plug-in has an independent data server; receiving an applet access request, determining whether the applet access request and a service corresponding to the plug-in meet a preset correspondence, and if it is determined that the applet access request and the service corresponding to the plug-in meet the preset correspondence, loading the plug-in according to the usage association; and sending the applet access request to the plug-in, so that the plug-in completes a task corresponding to the applet access request by accessing the data server of the plug-in.