Cross-Origin Message Channel for Browsing Contexts
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing techniques for communication between different browsing contexts are computationally inefficient and vulnerable to malicious actors, requiring excessive serializations and deserializations, and involving complex mechanisms and data paths that increase attack vectors and auditing requirements.
Innovation Solution
The establishment of a direct message channel between discrete, cross-origin browsing contexts using a shared worker, allowing browsing contexts to communicate without routing through inline frames and shared workers, thereby reducing serialization/deserialization cycles and intermediaries that handle each message.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If communication between browsing contexts is routed through inline frames and shared workers, then security constraints are satisfied, but computational efficiency deteriorates due to excessive serializations and deserializations
Solution Approach 1:
The patent introduces a message channel as an intermediary communication mechanism that allows direct message passing between browsing contexts without requiring multiple serializations and deserializations through inline frames and shared workers. The message channel acts as a dedicated communication pathway that maintains security while reducing computational overhead.
2Reliability
If communication is constrained to same-origin browsing contexts, then security is maintained, but adaptability deteriorates due to limited communication capabilities
Solution Approach 1:
The patent implements origin verification at the message channel creation stage, allowing each browsing context to verify the origin of its communication partner locally. This enables cross-origin communication while maintaining security by verifying origins at the point of connection establishment rather than restricting all communication to same-origin contexts.
3Reliability
If multiple intermediaries are used for cross-origin communication, then security verification is possible, but device complexity increases due to complex data paths
Solution Approach 1:
The patent extracts the origin verification functionality from the message relay process and implements it directly at the browsing context level during message channel creation. This removes the need for multiple intermediary components to perform security verification, simplifying the data path while maintaining security verification capabilities.
Data Source
AI summary
A first message from a first browsing context may be identified. The first message may include a connection identifier. A second message from a second browsing context may be identified. The second message may include the connection identifier. A processing device may transfer a first port of a message channel to the first browsing context and a second port of the message channel to the second browsing context based on the first message including the connection identifier and the second message including the connection identifier.