Cloud Browser Editing Unit for Secure Data Transmission

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cloud browser configurations may allow third parties to estimate user IDs or passwords based on the number of key inputs and communication times between the communication apparatus and the external Web service, compromising security.

Innovation Solution

A communication apparatus that receives and displays Web page rendering results from an image generation system, featuring an editing unit to accept and complete insertion data editing before transmitting it to the image generation system, thereby restricting data transmission until editing is finished, and using encrypted communication protocols.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Use of energy by moving object

If the image generation system operates on the remote server to relieve computation load, then the communication apparatus is relieved of computation load, but the user's ID or password may be estimated from the number of key inputs and communication times

Engineering Contradiction:
Improvecomputation loadVSAvoidsecurity risk
Core Design Contradiction:
Use of energy by moving objectVSObject-affected harmful factors

Solution Approach 1:

The patent introduces an editing unit as an intermediary component between the user input and the image generation system. This editing unit buffers and manages insertion data locally before transmission, preventing direct correlation between communication frequency and password length. The editing unit acts as a mediator that decouples the relationship between user input operations and server communication timing.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary action by completing the editing of insertion data locally before transmission to the server. The editing unit prepares and validates data in advance, so that the server receives pre-processed data rather than raw input sequences. This preliminary processing prevents the server from inferring information about the user's ID or password based on communication patterns.

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If key operations are transmitted to the server for processing, then the cloud browser can process Web page operations, but the number of communication times reveals information about the ID or password

Engineering Contradiction:
Improvecloud browser functionalityVSAvoidinformation leakage
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent extracts the editing functionality from the server-side image generation system and places it in a client-side editing unit. This extraction separates the data preparation function from the processing function, allowing the client to manage insertion data independently before transmission. The editing unit extracts and buffers data locally, preventing the server from observing the complete input process and inferring sensitive information.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent segments the data transmission process into distinct phases: local editing phase and transmission phase. The editing unit handles data preparation in segments, completing edits before batch transmission. This segmentation breaks the direct correlation between individual key operations and communication events, making it difficult for attackers to infer information from communication patterns.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS20240430300A1Communication apparatus, image generation system, control method thereof, and storage medium
Publication Date: 2024.12.26 CANON KK
  • US20240430300A1 patent drawing
  • US20240430300A1 patent drawing
  • US20240430300A1 patent drawing

AI summary

A communication apparatus configured to receive and display a rendering result of a Web page from an image generation system that functions as a cloud browser, the communication apparatus comprising: an editing unit configured to accept editing of insertion data to be inserted into an operation target element of the Web page; and a control unit configured to restrict transmission of the insertion data to the image generation system until editing of the insertion data is completed.