Dual-Security Domain Flash Ad Sandbox
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for delivering Flash advertisements lack effective mechanisms to restrict access to sensitive data, exposing it to third-party publishers and advertisers, which can lead to misuse or manipulation of ad statistics.
Innovation Solution
The system employs a dual-security domain approach, where one set of APIs is used for controlling Flash advertisement playback and another for accessing sensitive data, with the latter only accessible from a trusted domain, utilizing the Security.allowDomain() method to limit exposure and prevent unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If Flash advertisements are embedded in third-party programs, then advertisement reach and playback control are improved, but sensitive data exposure and security risks increase
Solution Approach 1:
The patent segments the Flash advertisement system into multiple security domains: a first security domain for playback control APIs and a second security domain for sensitive data access. This segmentation allows third-party programs to control advertisement playback while preventing them from accessing sensitive data, thus resolving the contradiction between embedding versatility and data security.
Solution Approach 2:
The patent introduces a trusted domain as an intermediary between third-party programs and sensitive data. The trusted domain acts as a mediator that receives playback control requests from third parties and forwards them to the Flash advertisement, while blocking direct access to sensitive data. This intermediary mechanism enables versatile embedding while maintaining security.
2Reliability
If access to sensitive data is restricted to a specific security domain, then data security is improved, but system complexity and access control mechanisms increase
Solution Approach 1:
The patent implements self-service security control where the Flash advertisement system automatically manages its own security domains and access permissions. The system inherently enforces domain-based access control without requiring external security infrastructure, reducing overall system complexity while maintaining strong security protections for sensitive data.
3Measurement precision
If multiple API sets are created for different security domains, then access control precision is improved, but development and maintenance difficulty increase
Solution Approach 1:
The patent creates a universal security domain framework where the same domain-based access control mechanism serves multiple functions: it controls API access, manages data protection, and regulates inter-domain communication. This multi-functional approach allows precise access control without requiring separate complex systems for each security function, easing development and maintenance.
Data Source
AI summary
A Flash advertisement is provided, and access to sensitive data associated with the Flash advertisement is restricted. First library code is stored at a first security domain, the first library code to control playback of the Flash advertisement; and second library code is stored at a second security domain, the second library code to access the sensitive data. An application at a third security domain is permitted to access the first library code, and only code residing at the first security domain is permitted to access the second library code.