Secure Mediator for Collaborative Input Editing in SaaS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in managing access to network resources and monitoring for misuse across diverse client devices, particularly in enabling collaborative editing of input elements due to secure containers isolating sessions and restricting content sharing.
Innovation Solution
Establishing a common secure framework between client applications to facilitate data flow between sessions, allowing one client application to invite another to jointly edit an input element within a network application, and using secure containers to manage and format input data for concurrent editing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If secure containers are used to isolate sessions between client applications, then security and control over network resources are improved, but collaborative editing of input elements becomes difficult due to restricted content sharing
Solution Approach 1:
The patent introduces a mediator component that bridges isolated secure sessions. The mediator receives data from one session, processes it, and forwards it to another session, enabling collaborative editing while maintaining session isolation. This resolves the contradiction by providing a controlled communication channel that preserves security boundaries while enabling collaboration.
Solution Approach 2:
The patent segments the collaborative editing function into separate components that operate within isolated sessions. Each user's editing actions are processed independently in their own secure container, then merged through a coordinated protocol. This allows security isolation to be maintained at the session level while enabling collaboration at the application level.
2Reliability
If each client application session is placed in a separate secure container, then security control is improved, but data flow between sessions is restricted preventing joint editing
Solution Approach 1:
A mediator service is introduced that acts as an intermediary between secure containers. It receives data from one container, validates and processes it according to security policies, then forwards it to the target container. This enables controlled data flow that maintains security control while supporting collaborative productivity.
Solution Approach 2:
The patent implements a universal data exchange protocol that works across all secure container boundaries. This protocol handles multiple functions including data transfer, synchronization, and conflict resolution, enabling productive collaboration while maintaining consistent security control across all sessions.
3Reliability
If trusted silos are established for each client application interface, then security isolation is improved, but content sharing between interfaces is restricted
Solution Approach 1:
The mediator captures content from one trusted silo, processes it through security validation, and reconstructs it for delivery to another silo. This prevents direct access between silos (maintaining isolation) while enabling controlled content sharing through the intermediary channel.
Solution Approach 2:
Instead of allowing direct sharing between trusted silos, the patent creates secure copies of content that can be exchanged through the mediator. Each silo operates on its own copy, and the mediator manages the synchronization and validation of these copies, preventing information loss while maintaining security isolation.
Data Source
AI summary
Embodiments described include systems and methods for multiple users to provide input on an input element of a network application. A first client application may establish, for a first user, a first session of a network application via a first embedded browser within the first client application. A second client application may establish, for a second user, a second session of the network application via a second embedded browser within the second client application. The first client application may communicate an invite to the second user to collaborate on an input element of a user interface displayed in the first embedded browser. The second client application may provide, responsive to acceptance of the invite, a second user interface for the second user to enter input into the input element. One of the first or the second client applications may display input received in the input element.