Link Protocol Agent for Cross-Firewall Application Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Developing interactive web applications is hindered by the need for publicly accessible HTTP/HTTPS endpoints, which is often restricted by web platform administrators, and integrating through firewalls is complicated by stringent security rules, leading to inefficiencies and scalability issues in cross-resource communication.
Innovation Solution
The implementation of link protocol agents that enable secure, cross-firewall communication by providing a temporary connection resource locator and connection token, allowing applications to establish and maintain link protocol communication connections without exposing public endpoints, using existing network infrastructure and protocols like Websocket or gRPC.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If publicly accessible HTTP/HTTPS endpoints are exposed to enable interactive web application features, then application interactivity is improved, but security risks and administrative restrictions increase
Solution Approach 1:
The patent introduces a server as an intermediary component that receives events from the web platform and forwards them to the application through secure communication channels. This mediator eliminates the need for the application to expose public endpoints, as all communications route through the server which manages security and authentication protocols.
2Reliability
If firewalled computing resources are integrated through stringent security rules, then security is improved, but integration efficiency and scalability worsen
Solution Approach 1:
The server acts as a trusted intermediary that communicates with both the firewalled computing resource and the application. It establishes secure connections on behalf of the application, managing authentication and data transmission without requiring the application to directly penetrate firewall restrictions, thereby maintaining security while improving integration efficiency.
Solution Approach 2:
The server autonomously handles security protocols, authentication mechanisms, and connection management with the firewalled resource. This self-service approach eliminates the need for complex firewall rule configurations and manual security setups for each application, enabling scalable integration while maintaining strong security posture.
3Ease of operation
If infrastructure overhead is increased to provide public endpoints and reverse proxy servers, then application connectivity is improved, but device complexity and cost increase
Solution Approach 1:
The patent merges the endpoint management functionality into the existing server infrastructure. Instead of requiring separate reverse proxy servers and public endpoint configurations, the server combines event receiving, authentication, and forwarding capabilities into a single integrated component that applications can utilize without additional infrastructure.
4Ease of manufacture
If firewall security rules are disabled to ease integration, then integration ease is improved, but security deteriorates
Solution Approach 1:
The server as an intermediary enables applications to integrate with firewalled resources without disabling security rules. It handles authentication and communication protocols that comply with firewall restrictions, allowing seamless integration while maintaining the integrity and enforceability of firewall security policies.
Data Source
AI summary
Methods, media, and systems for facilitating inter-application communications between a web platform and a remote application computing device are disclosed such that a link protocol agent associated with the web platform processes an authentication request based on which a temporary connection resource locator is provided. A connection is then established at the resource locator and maintained for a period of time. Payloads and acknowledgements are exchanged in the established connection. The connection is capable of being established across a firewall.