Browser Active Object Isolation via Proxy Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The stability and security of ActiveX plug-ins in IE browser environments are compromised due to their complex and open running environments, leading to frequent halts and failures that affect both webpage and plug-in stability, with existing methods unable to implement effective inter-process script execution.
Innovation Solution
A method and system where a proxy object is created in the webpage process to replace the active object, and the active object is run in an independent process, allowing communication through a communication window to separate the ActiveX plug-in from the webpage process, preventing failures from affecting the browser and enhancing stability and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the ActiveX plug-in runs in the webpage process, then the plug-in can be activated and used, but the stability and security of the browser are compromised due to frequent halts and failures
Solution Approach 1:
The system divides the plug-in execution environment into two separate processes: the webpage process and the plug-in process. The proxy object runs in the webpage process while the active object runs in the independent plug-in process, isolating failures and preventing them from affecting the entire browser.
Solution Approach 2:
A proxy object is introduced as an intermediary between the webpage and the ActiveX plug-in. The proxy object runs in the webpage process and communicates with the active object in the independent plug-in process through a communication window, mediating all interactions and isolating the browser from direct exposure to plug-in failures.
2Reliability
If the ActiveX plug-in runs in the webpage process, then the plug-in functionality is available, but security threats like viruses can affect the browser
Solution Approach 1:
The system segments the execution environment by creating an independent plug-in process separate from the webpage process. This isolation ensures that security threats in the plug-in process cannot directly compromise the browser, while still allowing the plug-in to perform its intended functions through the communication window.
Solution Approach 2:
The proxy object serves as a security intermediary that controls and monitors communications between the webpage and the ActiveX plug-in. It can filter, validate, and manage interactions, preventing malicious code from directly accessing browser resources while maintaining legitimate plug-in functionality.
3Reliability
If the webpage process and ActiveX plug-in share the same process, then communication is direct, but failures in one affect the other
Solution Approach 1:
The system architecture is segmented into distinct processes with clear boundaries. The webpage process and plug-in process are separated, each running independently with its own execution context, preventing cascading failures while maintaining controlled communication through the communication window.
Solution Approach 2:
The communication window and proxy object act as intermediaries that manage interactions between the separated processes. They handle message passing, data exchange, and coordination, abstracting the complexity of inter-process communication while ensuring reliable operation.
Data Source
AI summary
The present disclosure discloses a method, a system and a browser for executing a browser active object. In the present invention, a proxy object is run in a page process and an active object is run in an independent process, so that a true plug-in is separated from the page process. The present invention further discloses an inter-process script execution method, system and browser. The present invention further discloses a browser active object executing method and system, and a browser.