Application Extension Token Authentication Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Application extensions often face limitations in functionality and are vulnerable to attacks due to insecure communication with their accompanying local applications, including attacks from remote devices, malicious extensions, and unauthorized users.
Innovation Solution
The system authenticates application extensions by requesting a token from a local application, which generates and stores it in protected storage accessible only by the extension, enabling secure communication between the extension and the local application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If application extensions communicate with local applications, then additional functionality is provided, but security vulnerabilities increase
Solution Approach 1:
The patent introduces a token as an intermediary mechanism that mediates communication between application extensions and local applications. The token acts as a secure credential that extensions must obtain through authentication, preventing direct unauthorized access while enabling legitimate functionality. This resolves the contradiction by allowing extensions to communicate (maintaining versatility) while requiring authenticated tokens (reducing security vulnerabilities).
Solution Approach 2:
The patent implements preliminary authentication where extensions must obtain tokens before they can communicate with local applications. The authentication process happens in advance, verifying the extension's legitimacy before granting access. This preliminary action ensures that only authorized extensions can interact with applications, reducing security vulnerabilities while preserving necessary functionality.
2Reliability
If tokens are stored in protected storage accessible only by extensions, then security is improved, but access control complexity increases
Solution Approach 1:
The patent implements protected storage where each extension has its own isolated storage space that only that specific extension can access. The storage system automatically enforces access control based on extension identity, eliminating the need for complex manual access control mechanisms. This self-service approach improves security through isolation while keeping the system simple and automatic.
Data Source
AI summary
Systems and methods authenticate with application extensions. An application extension requests a token from a local application. The local application generates a token and either inserts the token into a protected storage accessible only by the application extension being run by the current user or returns the token back to the application extension after being confirmed by the legitimate user. The application extension uses the token to authenticate itself with the local application.