Chat Proxy for Secure User Validation and Remote Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional chat systems lack secure and scalable access control, language-specific infrastructure, multimedia support, integration with ticketing systems, and embedded command execution, leading to security issues, increased costs, and reduced productivity in help desk services.

Innovation Solution

A chat application proxy system that controls access through external user validation, separates routing and media paths for multi-language and multimedia support, integrates with existing LDAP systems, and executes embedded commands, allowing remote operation of user-facing applications and direct media connections.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If conventional chat systems allow free access to chat resources, then ease of operation is improved, but security is worsened due to inability to verify user legitimacy

Engineering Contradiction:
Improveaccess to chat resourceVSAvoiduser verification
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a chat proxy as an intermediary component that sits between the user and the chat resource. The proxy validates user credentials (such as LDAP authentication) before allowing access to the chat resource, thereby maintaining security while preserving ease of operation for legitimate users.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If voice call verification is used, then security is improved, but adaptability is worsened because the method cannot be applied to chat systems

Engineering Contradiction:
Improveuser verificationVSAvoidverification mechanism applicability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent replaces the voice-based verification mechanism with a chat-based verification mechanism. Instead of requiring voice interaction, the system now validates users through chat interface interactions, allowing the same verification logic to be applied across both voice and chat channels.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If local database authentication is implemented, then security is improved, but device complexity is worsened due to LDAP synchronization requirements

Engineering Contradiction:
Improveuser authenticationVSAvoidLDAP synchronization
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication functionality from the local chat system and delegates it to an external LDAP server. The chat proxy communicates with the LDAP server for user validation, eliminating the need to maintain and synchronize user credentials locally while still providing secure authentication.

Inventive Principle:
Principle #2Taking out (Extraction)

4Ease of operation

If chat application runs on same machine as chat resource, then ease of operation is improved, but security is worsened due to direct access vulnerability

Engineering Contradiction:
Improvechat application accessVSAvoidfirewall protection
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The chat proxy serves as a mediator that allows the chat application to run on the same machine while preventing direct access to the chat resource. All access requests must go through the proxy, which enforces authentication and authorization policies, effectively implementing firewall-like protection at the application level.

Inventive Principle:
Principle #24Intermediary (Mediator)

5Manufacturing precision

If language-specific infrastructure is implemented, then manufacturing precision is improved, but device complexity is worsened due to multiple language systems

Engineering Contradiction:
Improvelanguage supportVSAvoidlanguage infrastructure
Core Design Contradiction:
Manufacturing precisionVSDevice complexity

Solution Approach 1:

The patent implements a universal chat proxy that can handle multiple languages through a single infrastructure. The proxy performs language-specific operations (such as translation or language validation) while maintaining a common core system, eliminating the need for separate language-specific chat systems.

Inventive Principle:
Principle #6Universality (Multi-functionality)

6Ease of manufacture

If text-only chat is supported, then ease of manufacture is improved, but adaptability is worsened due to lack of multimedia support

Engineering Contradiction:
Improvechat system implementationVSAvoidmultimedia capability
Core Design Contradiction:
Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The chat proxy is designed to handle multiple media types (text, audio, video, files) through a unified interface. While the underlying chat system may be text-only, the proxy adds multimedia capabilities by translating various media formats into a common protocol that the text-based system can process.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS7987275B2Method, apparatus and computer program product implementing a chat application proxy and a chat application wrapper in a chat system
Publication Date: 2011.07.26 ALIBABA GROUP HOLDING LTD
  • US7987275B2 patent drawing
  • US7987275B2 patent drawing
  • US7987275B2 patent drawing

AI summary

Methods, apparatus and computer program products implement a chat proxy component and a chat wrapper component. The chat proxy component controls interactions with a chat application by external users. The chat proxy component receives chat requests from external users and initiates a chat session only if a user is validated as a valid user. User validation may be performed by a chat payment application that validates a user only if payment is received for chat services, or by an external user validation system that validates users as, for example, employees authorized to use the chat application. Once a chat session is established, chat operations are managed on a session-specific basis. The chat wrapper component manages communication between the chat proxy component and the chat application. The chat wrapper component also permits the user-facing chat application to be situated on a remote computer.