Cross-Domain Inter-Frame Messaging via Browser Channels
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current web browsers isolate web pages from different domains, preventing direct communication between them, which limits the ability of web pages to aggregate content from diverse sources and interact with each other, leading to inefficiencies in communication throughput and server performance.
Innovation Solution
The inter-frame messaging (IFM) technique enables cross-domain communication between parent and child web pages by establishing a client-based channel within the web browser, using IFM-frame and IFM-channel objects to bidirectionally communicate text-based messages and HTML/XML content, reducing the need for server transmission and enhancing security and control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If web browsers isolate web pages from different domains to ensure security, then security is improved, but communication capability between domains deteriorates
Solution Approach 1:
The patent introduces an intermediary communication mechanism that operates within the browser's sandbox environment. This intermediary enables controlled message passing between iframes of different domains without breaking the security model, allowing communication while maintaining isolation boundaries through a mediating channel.
Solution Approach 2:
The patent implements nested communication channels where messages are embedded within the browser's existing security context. The communication protocol nests multiple layers of encoding and validation, with each layer operating within the constraints of the browser's security model, allowing complex cross-domain interaction while maintaining security boundaries.
2Reliability
If conventional iframe URL techniques are used for cross-domain communication, then domain isolation is maintained, but communication throughput deteriorates
Solution Approach 1:
The patent extracts the communication protocol from traditional server-mediated approaches and implements it directly within the browser client. By taking out the communication logic from the server and embedding it in the browser's iframe architecture, the system achieves faster local message passing while maintaining domain isolation through the browser's security model.
Solution Approach 2:
The patent establishes communication channels in advance during iframe initialization, pre-configuring message routing and validation rules. This preliminary setup eliminates the need for repeated server round-trips during actual communication, improving throughput while maintaining security through pre-validated communication paths.
3Reliability
If messages are transmitted to a server for cross-domain communication, then domain security is maintained, but server traffic increases and network bandwidth is consumed
Solution Approach 1:
The patent enables iframes to communicate directly with each other through browser-based message passing, making the communication system self-sufficient without requiring server mediation. This self-service approach eliminates unnecessary network traffic and server load while maintaining security through the browser's built-in isolation mechanisms and validated message protocols.
Data Source
AI summary
Cross-domain communication between a parent web page hosted in a parent domain and a child web page hosted in a different child domain is provided. Upon downloading the parent page and child page into a client's web browser, an IFM-channel connection can be established within the browser between the parent page and child page, which can be used to bidirectionally communicate text-based messages containing commands and HTML content directly between the parent page and child page. Additionally, an XML-channel connection can be established within the browser between the parent page and child page, which can be used to bidirectionally communicate text-based messages containing HTTP commands and XML content directly between the parent page and child page. This cross-domain communication of messages takes place completely within the browser.