Mobile Digital Page Viewer Isolation for Secure Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile digital pages face challenges in providing secure data exchange and input capabilities due to limited input interfaces and restricted computing environments, leading to inefficiencies and security risks.
Innovation Solution
A system comprising a cache server and viewer component that validates and caches third-party documents, allowing secure data exchange through a private communication channel, and uses a runtime component to autofill data values and execute actions without direct access by the third-party developer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If third-party developers create digital pages with direct data access, then functionality and ease of operation are improved, but security and reliability deteriorate due to unauthorized data access and malicious code execution
Solution Approach 1:
The patent introduces a secure communication channel as an intermediary between the digital page and the data processing system. This channel acts as a mediator that enables data exchange while maintaining security controls, allowing third-party developers to access data without direct system access. The secure channel ensures that only authorized data requests can proceed, resolving the contradiction between ease of operation and security.
Solution Approach 2:
The patent segments the data processing system into distinct components: a secure communication channel, a data processing system, and a viewer component. This segmentation isolates the digital page environment from the core data processing system, allowing the digital page to function independently while maintaining security through controlled communication interfaces. The segmentation prevents direct access to sensitive data while enabling necessary functionality.
2Adaptability or versatility
If JavaScript is allowed in electronic documents, then functionality and interactivity are improved, but security deteriorates due to potential malicious code execution
Solution Approach 1:
The patent extracts and removes JavaScript code from the electronic documents that are stored and executed in the viewer component. By taking out the potentially harmful JavaScript, the system eliminates the risk of malicious code execution while still allowing the digital page to function through alternative secure mechanisms. This extraction directly addresses the security concern while preserving functionality through the secure communication channel.
3Reliability
If documents are validated and cached by the system, then security and reliability are improved, but device complexity increases due to validation components and cache servers
Solution Approach 1:
The validation component automatically validates electronic documents without requiring manual intervention or complex configuration. The system performs self-service validation by automatically checking documents against security policies and caching them when appropriate. This automation reduces the operational complexity despite adding validation and caching functionality, as the system manages its own security requirements without user involvement.
4Reliability
If a secure communication channel is implemented, then data security is improved, but productivity decreases due to additional communication overhead and validation steps
Solution Approach 1:
The system performs preliminary validation of electronic documents before they are stored in the cache server. By validating documents in advance, the system ensures security is established before any data exchange occurs, preventing the need for repeated validation during subsequent communications. This preliminary action reduces the overhead of repeated validation steps and improves overall productivity while maintaining security.
Data Source
AI summary
Secure communication in mobile digital pages is provided. The system receives an electronic document and validates the electronic document for storage in a cache server. The system receives a request for the electronic document and provides it to a viewer component on a client computing device. The viewer component loads the electronic document in an iframe. The viewer component executes a runtime component to receive, via a secure communication channel, a tag from the electronic document. The system receives the tag and selects a data value for transmission to the viewer component. The viewer components provides the data value to cause the runtime component to execute an action with the data value.