Browser Sandbox Protocol Handler for Secure Location-Based Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing client/server systems for data access struggle to efficiently manage dynamic user access privileges, especially in environments where access needs change frequently, and face challenges with web-based record repositories due to limitations in accessing locally stored device identifiers within a browser sandbox environment.
Innovation Solution
A method and apparatus that utilize a protocol handler to detect communication events within a web browser, execute a listener outside the sandbox environment to obtain a device identifier, and provide it to a records server, allowing for location-based data access while maintaining security protocols.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user access privileges are limited based on static user accounts, then security is improved, but adaptability deteriorates when access needs change frequently
Solution Approach 1:
The system transitions from static user account-based access control to dynamic device identifier-based access control. The device identifier changes based on location and device context, allowing access privileges to adapt automatically without manual reconfiguration, thus resolving the contradiction between security and adaptability
Solution Approach 2:
The system changes the parameter used for access control from static user account credentials to dynamic device identifiers that reflect current location and device context. This parameter change enables automatic adaptation of access privileges based on environmental factors rather than requiring manual updates to user accounts
2Reliability
If physical access to documents is limited, then security is improved, but ease of operation deteriorates in electronic environments
Solution Approach 1:
The system replaces the mechanical approach of physical document access control with an electronic device identifier-based access control system. This substitution maintains security through automated device verification while eliminating the need for manual document handling and physical access restrictions, thereby improving ease of operation in electronic environments
3Reliability
If a browser sandbox environment is used, then security is improved, but device identifier access deteriorates
Solution Approach 1:
The system introduces an intermediary mechanism where the browser sandbox communicates with external device identifier services through authorized APIs or protocols. This intermediary approach allows the sandboxed browser to retrieve device identifiers securely without breaking sandbox isolation, resolving the contradiction between security and access capability
Data Source
AI summary
A method, apparatus and computer program product are provided for implementing a location-based records access system. An example of the method includes providing, in a browser sandbox environment executing on a processor, a client interface for interacting with a records server, receiving an indication of an occurrence of an event within the client interface, the indication comprising electronic data sufficient to identify a particular protocol handler application, executing the particular protocol handler application outside of the browser sandbox environment, wherein executing the particular protocol handler application results in execution of a listener, performing a call, by the client interface, to the listener to request a device identifier from the listener, receiving, by the client interface, the device identifier from the listener; and transmitting the device identifier to the records server.