Isolated Storage Regions for Secure Offline HTML Application Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In information processing systems, data security is compromised when HTML applications are executed in offline environments on terminal devices, as all local applications share the same storage region, leading to potential data leakage from malicious applications.
Innovation Solution
The solution involves associating external addresses with applications stored in terminal device memory, booting an internal web server, and using a browser to access and execute applications, thereby isolating data storage regions and ensuring secure data management through encryption and secure file systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If HTML applications are stored in local terminal storage regions, then offline execution capability is improved, but data security deteriorates due to shared storage regions
Solution Approach 1:
The patent segments the shared local storage region into application-specific isolated storage regions. Each HTML application is assigned a dedicated storage region that is isolated from other applications, preventing data leakage while maintaining offline execution capability. The browser creates separate storage spaces for each application based on its external address, ensuring that malicious applications cannot access data from other applications.
2Device complexity
If all local HTML applications share the same storage region, then device complexity is reduced, but data security deteriorates due to potential data leakage
Solution Approach 1:
The patent introduces an intermediary mechanism (the browser's storage management system) that automatically creates and manages isolated storage regions for each HTML application. This intermediary handles the complexity of storage isolation transparently, so while multiple isolated regions are created, the user and applications themselves do not need to manage them directly. The browser assigns storage regions based on external addresses and automatically isolates data.
3Ease of operation
If data is stored in shared storage regions, then ease of operation is improved, but data security deteriorates as malicious applications can access other applications' data
Solution Approach 1:
The patent applies local quality by making each storage region have different security properties tailored to its associated application. Each HTML application's storage region is isolated and accessible only to that specific application based on its external address. This means that while data access remains convenient for the authorized application, malicious applications cannot access data from other applications because each region has restricted access permissions specific to its owner.
Data Source
AI summary
A non-transitory computer-readable storage medium storing therein an application execution program for causing a computer to execute a process including: associating an external address outside of a terminal device with an application stored in a memory in the terminal device; booting an internal web server to which the external address is assigned, the internal web server being formed in the terminal device; causing a browser to access the internal web server at the external address and acquire the application stored in the memory; and causing the browser to execute the application and access data in a data storage region in the terminal device associated with the external address.