Microservice Container Web Browser Isolation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Web browser applications consume significant memory and processing resources, leading to performance degradation of other applications and increased vulnerability to virus and malware attacks, which can corrupt virtual computing resources and incur significant costs for redeployment.

Innovation Solution

Redirecting web browser applications to a separate microservice-based container, where they are executed, isolating them from the client device's resources and reducing data and process exposure to threats, while optimizing resource usage and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If web browser applications are executed on the client device, then web browsing functionality is provided, but memory and processing resources are significantly consumed leading to performance degradation

Engineering Contradiction:

Improveweb browsing functionalityVSAvoidperformance of other applications

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The system segments the web browsing functionality from the client device by launching the web browser in a separate microservice-based container on a remote computing resource. This separation allows the client device to maintain its resources while still providing web browsing access to users, thereby resolving the contradiction between providing web browsing functionality and maintaining performance of other applications.

Inventive Principle:

Principle #1Segmentation

2Ease of operation

If web browser applications run on virtual computing resources, then web access is enabled, but vulnerability to virus and malware attacks increases

Engineering Contradiction:

Improveweb access capabilityVSAvoiddata security against malware

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The microservice-based container acts as an intermediary between the client device and the web browser application. This intermediary layer isolates the client device from direct exposure to web-based threats, allowing web access functionality while protecting the underlying virtual computing resources from virus and malware attacks.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The web browser application is extracted from the client device environment and relocated to a separate microservice-based container on a remote computing resource. This extraction removes the vulnerability vector from the client device while preserving web browsing functionality, thereby improving reliability without sacrificing ease of operation.

Inventive Principle:

Principle #2Taking out (Extraction)

3Speed

If web browser applications are executed locally, then immediate access to web resources is achieved, but resource overloading and data loss risk increase

Engineering Contradiction:

Improveweb resource access speedVSAvoidrisk of data loss from malware

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

The system transitions from a single-dimension local execution model to a multi-dimensional architecture where the web browser runs in a remote microservice-based container while the client device maintains control and coordination capabilities. This dimensional shift allows immediate web resource access through remote connectivity while physically separating the harmful factors from the client device data.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS10942762B2Launch web browser applications in microservice-based containers

Publication Date: 2021.03.09 HEWLETT PACKARD ENTERPRISE DEV LP

AI summary

Examples of launching web browser applications in microservice-based containers are disclosed. In an example, a computing resource is fetched, from amongst a plurality of computing resources, in a network, in response to receipt of a redirection request from a client device. The redirection request is generated on initialization of a web browser application in the client device. The computing resource is fetched based on resource availability data indicative of availability of memories and processors of the plurality of computing resources. A microservice-based container is launched in the fetched computing resource, where the microservice-based container is dedicated to the web browser application and linked to the client device. The web browser application is launched in the microservice-based container.