Interface Provision Unit for Secure Cross-Framework Application Communication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing software frameworks face challenges in controlling and securing communication between applications operating on different environments, including managing permissions, avoiding security compromises, and enabling remote management without system restarts.

Innovation Solution

A method and system that utilize an interface provision unit to create an instant interface for controlled communication between a generic application and a service application in a second environment, allowing for secure and permission-managed interactions without altering the second environment, using an interface manager and creator to facilitate the process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If applications communicate freely across different software frameworks, then communication versatility is improved, but security control deteriorates

Engineering Contradiction:

Improvecommunication versatilityVSAvoidsecurity control

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces an interface provision unit as an intermediary component that mediates communication between applications on different software frameworks. This unit dynamically provisions interfaces that enforce security policies, allowing communication versatility while maintaining security control through the intermediary's authorization mechanisms.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements dynamic interface provisioning where communication permissions are not static but are established on-demand based on authorization requests. The interface provision unit dynamically creates and manages communication interfaces, allowing the system to adapt security controls flexibly while maintaining both versatility and security.

Inventive Principle:

Principle #15Dynamics

2Ease of operation

If communication interfaces are pre-configured for all applications, then communication ease is improved, but system complexity deteriorates

Engineering Contradiction:

Improvecommunication easeVSAvoidsystem complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements a self-service mechanism where applications can autonomously request and obtain communication interfaces through the interface provision unit. Instead of requiring pre-configuration or manual setup, applications self-provision their own communication interfaces by submitting authorization requests, thereby improving ease of operation without significantly increasing system complexity.

Inventive Principle:

Principle #25Self-service

3Reliability

If security mechanisms are strengthened for cross-framework communication, then security control is improved, but communication productivity deteriorates

Engineering Contradiction:

Improvesecurity controlVSAvoidcommunication productivity

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements preliminary authorization where security checks and interface provisioning are performed in advance before actual communication occurs. The interface provision unit pre-establishes authorized communication interfaces based on authorization requests, so that when communication is needed, it can proceed immediately without security delays, thus maintaining both security control and communication productivity.

Inventive Principle:

Principle #10Preliminary action

4Adaptability or versatility

If the second environment is modified to enable communication, then communication adaptability is improved, but environment stability deteriorates

Engineering Contradiction:

Improvecommunication adaptabilityVSAvoidenvironment stability

Core Design Contradiction:

Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent extracts the communication interface provisioning functionality from the second environment into a separate interface provision unit. This allows the second environment to remain stable and unchanged while the interface provision unit handles all adaptation and interface creation, thereby enabling communication adaptability without modifying or destabilizing the second environment.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS8707330B2Method and system for controlled communication between applications

Publication Date: 2014.04.22 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

A method, system and computer program in a software framework for enabling controlled communication between a generic application on the software framework and a service application in a second environment. An access request is transmitted by the generic application to an interface provision unit. The request includes an identity of the generic application. An instant interface is provided by the interface provision unit to the second environment. The instant interface is determined by the access request and dedicated for the generic application. A response is returned by the interface provision unit to the generic application including an address to the instant interface. Thereby the instant interface permits controlled communication between the generic application and the service application, thus enabling the new controlled communication without changes of the second environment.