Remote Containerized Application Processing for Secure Enterprise Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
IT departments face challenges in balancing employee access to enterprise resources with the need to ensure the security and integrity of those resources, as client devices may not provide sufficient protection for sensitive information, leading to the requirement for advanced management solutions to restrict resource processing.
Innovation Solution
The implementation of a system that analyzes requests to access restricted resources, redirects them for processing according to configured profiles, and merges user interfaces to present a unified experience while ensuring sensitive information is processed securely, either locally or remotely, depending on the profile settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If employees are provided with client devices to access enterprise resources, then productivity and accessibility are improved, but security and integrity of enterprise resources deteriorate
Solution Approach 1:
The patent segments the application execution environment by introducing a remote containerized environment that separates sensitive enterprise resource processing from the employee's local client device. The application is divided into local UI components and remote processing components, allowing employees to access resources productively while security-sensitive operations are isolated in a controlled remote environment.
Solution Approach 2:
The patent introduces a remote server as an intermediary between the employee's client device and enterprise resources. This intermediary hosts a containerized application environment that mediates all access to sensitive resources, enabling productive employee access while maintaining security through centralized control and monitoring of resource interactions.
2Reliability
If remote server processing is implemented for security, then resource protection is improved, but system complexity and processing overhead increase
Solution Approach 1:
The patent creates a universal containerized application environment that can host multiple applications and handle various enterprise resources through a single standardized remote infrastructure. This multi-functional approach simplifies the overall system architecture by providing a unified security model and resource management mechanism that works across different applications and resource types.
Solution Approach 2:
The patent changes the operational parameters of application execution by moving from local device processing to remote server processing within containerized environments. This parameter change enables centralized security control, resource monitoring, and access management while maintaining application functionality, thereby improving resource protection without proportionally increasing complexity.
3Speed
If local processing is allowed for performance, then response speed is improved, but security risks increase
Solution Approach 1:
The patent applies local quality by allowing fast local processing for non-sensitive UI interactions while directing security-sensitive operations to the remote containerized environment. Different parts of the application execution have different processing locations based on their security requirements, optimizing both speed and security for each specific operation.
Data Source
AI summary
In an example implementation of the disclosed technology, a method includes accessing, by a management agent associated with a client device, a profile associated with a requested resource, wherein the profile comprises at least one profile criterion. The method also includes evaluating the profile criterion based, at least in part, on status information associated with the client device to determine any processing restrictions associated with the requested resource. The method also includes, responsive to receiving an indication that the resource is subject to a server-device processing restriction, requesting access to the resource from a remote server and receiving an instance of a user interface for interacting with the resource.