Hosted Platform Enforcing Resource Limits on Customer Page Code
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Online merchants using third-party hosted electronic commerce platforms face challenges in customizing their network sites due to security concerns and compliance with Payment Card Industry Data Security Standards (PCI DSS), which restricts their ability to execute arbitrary page generation code.
Innovation Solution
Implementing a system that allows merchants to upload and execute customer-supplied page generation code on a hosted network page server platform, with data aggregation and resource consumption restrictions to ensure security and compliance, using a network page generation environment that includes a Java Virtual Machine and servlet container, and enforces compile-time and runtime restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If merchants use third-party hosted electronic commerce platforms, then security compliance with PCI DSS is improved, but flexibility in customizing network sites deteriorates
Solution Approach 1:
The patent introduces a hosted electronic commerce platform as an intermediary between merchants and the underlying infrastructure. This platform provides PCI DSS compliance while allowing merchants to customize their network sites through controlled access to page generation capabilities, thus resolving the contradiction between security compliance and customization flexibility
Solution Approach 2:
The system segments the electronic commerce platform into distinct functional layers: the hosted infrastructure layer that ensures security compliance, and the customizable presentation layer that allows merchant-specific customizations. This segmentation enables both security and flexibility to coexist in different parts of the system
2Adaptability or versatility
If merchants execute arbitrary page generation code, then customization flexibility is improved, but security risks and resource misuse increase
Solution Approach 1:
The hosted platform acts as an intermediary that mediates between merchant customization needs and security concerns. It provides a controlled environment where page generation code can execute with necessary restrictions, allowing flexibility while preventing security risks through enforced compliance rules
Solution Approach 2:
The system changes the execution parameters of page generation code by imposing compile-time and runtime restrictions. These parameter changes include limiting resource consumption, controlling data access, and enforcing security policies, thereby enabling customization while mitigating security risks
3Reliability
If computing resources are restricted, then security and compliance are improved, but productivity and functionality deteriorate
Solution Approach 1:
The system dynamically adjusts resource restrictions based on the specific requirements of each merchant's page generation code. By instrumenting the code with monitoring capabilities, the platform can enforce security-compliant resource limits while maintaining sufficient productivity for legitimate customization needs
Data Source
AI summary
Disclosed are various embodiments for securing execution of page generation code. The page generation code may be instrumented with code that facilitates monitoring of one or more resources consumed by the page generation code. Various checks relating, for example, to code size and whether exception-handling code is present may be performed. The page generation code may be executed to generate a network page in response to a request obtained from a client. One or more resource consumption limits may be enforced upon the page generation code.