Sandboxed Plug-in Distribution via Centralized Database

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for installing application plug-ins often require updates or restarts of applications or devices, and can compromise security due to potential malicious content from third-party providers, posing risks to both the application and the computing device.

Innovation Solution

A sandboxed application plug-in framework is introduced, where a monitoring plug-in is deployed dynamically over a network, allowing remote monitoring management (RMM) by saving and retrieving plug-in components from a centralized database, ensuring security and up-to-date monitoring without manual installation, and enabling selective deployment to any remote device.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If application plug-ins are installed through traditional methods, then additional capabilities can be added to the application, but the installation process requires application updates or restarts and may compromise security due to potential malicious content

Engineering Contradiction:
Improveadditional capabilitiesVSAvoidsecurity performance
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system segments the plug-in installation process into separate components: a monitoring plug-in that runs independently in a sandboxed environment, separate from the main application. This allows the application to gain additional capabilities through the plug-in without requiring updates or restarts, while the sandboxed monitoring environment isolates potential malicious content from the main application, thus resolving the contradiction between adaptability and security.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system introduces a centralized database as an intermediary between the third-party plug-in provider and the application. The monitoring plug-in retrieves plug-in components from this database rather than directly installing from third-party sources. This intermediary layer enables the application to access additional capabilities while the centralized database can verify and control the distribution of plug-in components, maintaining security without compromising functionality.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If application plug-ins are installed through traditional methods, then additional capabilities can be added to the application, but the installation process is complex and requires manual updates or restarts

Engineering Contradiction:
Improveadditional capabilitiesVSAvoidinstallation process
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The monitoring plug-in operates autonomously in a sandboxed environment, automatically retrieving and managing plug-in components from the centralized database without requiring manual installation or user intervention. The system self-updates and self-manages the plug-in lifecycle, eliminating the need for application updates or restarts while maintaining the ability to add additional capabilities, thus resolving the contradiction between adaptability and ease of operation.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If application plug-ins are distributed from third-party providers, then additional functionality can be provided, but the security risk increases due to potential malicious content or cyber attacks

Engineering Contradiction:
ImprovefunctionalityVSAvoidsecurity risk
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system implements prior cushioning by creating a sandboxed monitoring environment before the plug-in components are fully integrated with the application. The monitoring plug-in is deployed first and operates in an isolated environment, providing a protective layer that can detect and contain malicious content before it reaches the main application. This preemptive security measure enables the system to accept third-party plug-ins for enhanced functionality while mitigating security risks in advance.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

Solution Approach 2:

The centralized database serves as an intermediary that mediates between third-party plug-in providers and the application. All plug-in components are distributed through this controlled intermediary, which can verify, filter, and manage the distribution of plug-in content. This intermediary layer maintains functionality by allowing third-party plug-ins while reducing security risks by controlling the distribution channel and isolating it from the main application through the sandboxed monitoring plug-in.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11126417B2System and method for application plug-in distribution
Publication Date: 2021.09.21 BARRACUDA NETWORKS INC
  • US11126417B2 patent drawing
  • US11126417B2 patent drawing
  • US11126417B2 patent drawing

AI summary

A new approach is proposed that contemplates systems and methods to support a sandboxed application plug-in distribution framework. An installation package containing a monitoring plug-in, a display plug-in, and/or third part components is received by a first application running on a first computing device. The first application installs the display plug-in and saves the monitoring plug-in to a centralized database. The first application sends an instruction to a second application running on a second computing device to retrieve the monitoring plug-in from the database and install the monitoring plug-in on the second computing device. Upon receiving a user request, the display plug-in of the first application sends a query to the monitor plug-in of the second application. In response to the query, the monitoring plug-in sends the requested monitored data collected by the second application to the display plug-in, which then formats and presents the monitored data to the user.