Gateway Intermediary for Secure Web Content Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies lack a seamless and secure method for inserting web content and services into webpages without requiring additional software or browser plug-ins, while maintaining the integrity and security of the original content.
Innovation Solution
A system that includes a gateway intercepting and modifying HTTP requests and responses to insert additional content, such as scripts and iframes, into webpages, using a data insertion module and policy rules to ensure compliance with industry standards and security, without altering the original webpage's security or integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If web content and services are inserted into webpages using traditional methods (software or browser plug-ins), then customization and functionality are improved, but device complexity and ease of operation deteriorate due to requiring additional software installation
Solution Approach 1:
The patent introduces a gateway server as an intermediary between the web server and the client device. This gateway transparently intercepts HTTP requests, inserts additional web content and services into the webpage, and forwards the modified content to the client. This eliminates the need for client-side software or plug-ins while achieving customization, as the gateway performs the content insertion function server-side.
2Adaptability or versatility
If web content is inserted into webpages, then functionality and customization are improved, but security and content integrity deteriorate
Solution Approach 1:
The gateway server acts as a trusted intermediary that inserts content into webpages. Since the gateway controls the insertion process and has access to policy rules and subscriber information, it can ensure that only authorized and secure content is inserted, maintaining webpage security and integrity while enabling functionality enhancement.
Solution Approach 2:
The system performs preliminary actions by establishing policy rules and subscriber profiles before content insertion occurs. The gateway checks these pre-defined rules and information to determine what content to insert, ensuring that security and integrity requirements are satisfied before any modification to the webpage occurs.
3Ease of operation
If gateway intercepts and modifies HTTP requests and responses, then seamless content insertion is achieved, but processing time and system complexity increase
Solution Approach 1:
The system performs preliminary actions by pre-configuring policy rules and subscriber profiles before runtime content insertion. The gateway has these rules ready and can quickly match incoming requests against them, reducing processing time compared to making security and customization decisions in real-time for each request.
Solution Approach 2:
The gateway operates autonomously using pre-configured policy rules and subscriber information stored locally. It self-determines what content to insert based on the request characteristics and pre-established rules, without needing to query external systems for each decision, thereby minimizing additional processing time.
Data Source
AI summary
A method of web content and web services insertion is provided. The method includes receiving response data sent in response to request data, wherein the response data comprises a response header and a first webpage. The method also includes after a determination that insertion data is to be included with the first webpage, updating the response data by adding insertion data to the first webpage. The insertion data includes a script element that identifies a script that includes an instruction to display a second webpage within the first webpage. The method also includes providing the updated response data.