Center Apparatus Isolates Server URLs from Browser Vulnerabilities

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing data processing systems using HTML documents are vulnerable to attacks from malicious users who can access server URLs through ordinary web browsers, exploiting browser vulnerabilities.

Innovation Solution

A data processing system comprising a server, a center apparatus, and a terminal, where the center apparatus receives data input, transmits it to the terminal, and accesses the server URL using the HTTP protocol, ensuring secure communication and reducing the risk of URL exposure.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If an ordinary web browser is used at the terminal side to access HTML documents, then data processing functionality is provided, but the server URL and access route may be exposed to malicious users through browser vulnerabilities

Engineering Contradiction:
Improvedata processing functionalityVSAvoidserver URL exposure
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a center apparatus as an intermediary between the terminal and the server. The center apparatus receives data from the terminal, processes it, and communicates with the server using a predetermined protocol. This intermediary structure prevents the terminal from directly exposing server URLs to malicious users while maintaining data processing functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system is divided into three separate components: terminal, center apparatus, and server. The terminal handles user interaction, the center apparatus manages data processing and protocol conversion, and the server performs backend operations. This segmentation isolates the server URL exposure risk from the terminal, as the center apparatus acts as a buffer that does not require direct server URL exposure at the terminal side.

Inventive Principle:
Principle #1Segmentation

2Productivity

If the terminal directly accesses the server using HTML documents, then data processing is performed, but the system becomes vulnerable to malware attacks targeting browser vulnerabilities

Engineering Contradiction:
Improvedata processing efficiencyVSAvoidsystem security
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The center apparatus serves as a trusted intermediary that handles communication with the server using secure protocols. This eliminates the need for the terminal to directly access the server, thereby preventing malware from exploiting browser vulnerabilities to expose server URLs while maintaining efficient data processing through the centralized center apparatus.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Object-affected harmful factors

If the center apparatus manages all data processing communication, then server URL exposure is prevented, but the system complexity increases

Engineering Contradiction:
ImproveURL exposure riskVSAvoidsystem architecture
Core Design Contradiction:
Object-affected harmful factorsVSDevice complexity

Solution Approach 1:

The center apparatus is designed to perform multiple functions: receiving data from terminals, processing data, communicating with the server using predetermined protocols, and managing security. By consolidating these functions in a single multi-functional component, the system prevents URL exposure without requiring multiple separate complex components, thus managing system complexity more effectively.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS10412147B2Data processing system, center apparatus, and program
Publication Date: 2019.09.10 HYWAY TECH SHANGHAI
  • US10412147B2 patent drawing
  • US10412147B2 patent drawing
  • US10412147B2 patent drawing

AI summary

Provided is a data processing system capable of decreasing the possibility of attack to the server, regardless of the presence or absence of vulnerability of a web browser. In response to the data input at the terminal 3, the center apparatus 2 transmits, to the terminal 3, a data input program for transmitting the input data to the center apparatus 2. The center apparatus 2 receives data to be processed and the URL of the server 1 from the terminal 3, accesses the received URL, and transmits the data to be processed to the server 1 by the HTTP protocol.