Browser-Local App Token Bridge for Media Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web browsers' sandboxing limits the ability of JavaScript to access local information, restricting the functionality of applications that require such access.
Innovation Solution
A system and method where a browser receives a login challenge, validates credentials, and upon successful validation, sends an access token to a local application via a local loopback address, allowing the local application to access and send local information to a server application, including media streams, even if the browser does not support WebRTC.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If web browsers use sandboxing to protect local information, then security is improved, but the ability of JavaScript to access local information deteriorates
Solution Approach 1:
The patent introduces a local application as an intermediary component that runs outside the browser sandbox. This local application receives access tokens from the browser and uses them to access local information and resources on behalf of the browser, thereby enabling functionality while maintaining security boundaries. The intermediary bridges the gap between the sandboxed browser environment and the local system resources.
2Reliability
If JavaScript is restricted from accessing local information, then security is improved, but the functionality of applications requiring local access deteriorates
Solution Approach 1:
The system segments functionality into two distinct components: a sandboxed browser component that handles web rendering and authentication, and a local application component that handles local resource access. This segmentation allows each component to operate within its security boundaries while collaborating to achieve overall functionality. The browser segment obtains access tokens for authenticated requests, while the local application segment uses these tokens to access protected local resources.
3Reliability
If browsers are sandboxed to limit JavaScript access, then security is improved, but the ability to send media streams via WebRTC deteriorates
Solution Approach 1:
The local application serves as an intermediary that enables WebRTC functionality for sandboxed browsers. The browser can establish WebRTC connections through the local application, which has the necessary permissions to access local media devices. This allows media streams to be sent and received while maintaining the browser's sandboxed security model, as the local application acts as a trusted bridge between the browser and local hardware resources.
Data Source
AI summary
When a user is attempting to access a server application, a challenge is received, in a browser, for a one or more login credentials to access a server application (e.g., a web page). For example, a user is requested to provide a user name and password to login to the server application. In response to the user providing the credentials via the browser, the login credentials are sent. If the credentials are validated, an access token is received by the browser from the server application. In response to receiving the access token for the server application, the browser sends the access token and an address for the server application, via a local loopback address, to a local application. This allows the local application to send local information, such as local files, to the server application using the token.