Web Application Renderer Hybrid Cloud Origin Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communication between disparate components in hybrid cloud systems is complex due to the public and private sides typically not residing in the same location or network, making direct access and data transfer challenging.
Innovation Solution
A method is implemented where a web application renderer in a client device, executing in a private network with a private host computer, requests and receives an indication that the public cloud host is an allowed origin, allowing data or commands to be transmitted through the private host for managing the hybrid cloud system, utilizing cross-origin resource sharing to bypass same-origin policy restrictions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a web application renderer executes in a client device sharing a private network with a private host computer, then communication between public cloud and private cloud components is enabled, but security restrictions from same-origin policy prevent direct access to private host resources
Solution Approach 1:
The patent introduces an intermediary mechanism where the web application renderer acts as a mediator between the public cloud interface and private cloud resources. The renderer executes in the client device's private network environment and facilitates communication by requesting and receiving origin indication from the private host computer, thereby enabling cross-origin resource sharing while maintaining security boundaries. This intermediary approach allows seamless communication without directly bypassing security policies.
2Adaptability or versatility
If cross-origin resource sharing is utilized to bypass same-origin policy restrictions, then data and commands can be transmitted to manage hybrid cloud system, but security risks increase due to relaxed origin verification
Solution Approach 1:
The patent implements preliminary action by requiring the web application renderer to request origin indication from the private host computer before transmitting any data or commands. This pre-verification step ensures that the public cloud origin is authorized to access private cloud resources. By performing origin verification in advance, the system enables cross-origin communication while maintaining security controls, thus reducing rather than increasing security risks.
3Reliability
If the web application renderer requests origin indication from the private host computer, then secure access control is maintained, but communication complexity increases due to additional verification steps
Solution Approach 1:
The patent applies self-service by enabling the web application renderer to autonomously request and receive origin indication from the private host computer without requiring external intervention. The renderer independently manages the verification process, obtaining necessary authorization to communicate with private cloud resources. This self-service approach maintains secure access control while simplifying the overall system architecture by eliminating the need for complex external verification mechanisms.
Data Source
AI summary
Aspects of communication of a client device with a private or hybrid cloud are described. In some aspects, a private host computer is determined as being connected to a private network. The private network differs from a network to which the client device is connected. A virtual private network is established between the client device and the private host computer. The virtual private network being established using a virtual private network server that includes a connection to the private host computer through the private network. A request is transmitted to the private host computer through the virtual private network. The request includes an origin value, wherein instructions associated with the origin value are allowed to access resources of the private host computer.