Secure Script Isolation in Unified Charting Framework
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing charting technologies face challenges in securely isolating script processing from graphic rendering, particularly in providing a secure interface to low-level graphic APIs while maintaining performance, especially when delivering data visualizations across multiple platforms.
Innovation Solution
A unified charting framework employs a recursive cell-based hierarchy and a Scene Graph API for script processing, passing serialized JSON-based data structures to a Renderer API, enhancing security and performance by avoiding the transmission of script code, and utilizing a tweening engine for animated transitions between visualizations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If script code is passed to the Renderer API for graphic processing, then functionality and flexibility are improved, but security risks increase due to potential malicious code execution
Solution Approach 1:
The patent divides the system into two distinct components: a Scene Graph API for script processing and a Renderer API for graphic rendering. This segmentation isolates the rendering engine from script code, allowing the Renderer to receive only serialized data structures without executing any script, thereby eliminating security risks while preserving functionality through the Scene Graph's script processing capabilities
Solution Approach 2:
The patent introduces a Scene Graph as an intermediary layer between script processing and graphic rendering. The Scene Graph processes scripts and transforms them into serialized JSON-based data structures that are then passed to the Renderer API. This intermediary eliminates direct script execution in the rendering pipeline while maintaining full functionality through the intermediate data representation
2Ease of operation
If script processing is integrated with graphic rendering, then ease of operation is improved, but security control deteriorates due to difficulty in providing secure interface to low-level graphic APIs
Solution Approach 1:
The patent separates script processing operations from graphic rendering operations into distinct APIs. The Scene Graph API handles all script processing in a controlled environment, while the Renderer API handles only graphic rendering with serialized data. This segmentation maintains ease of operation through a unified framework while improving security control by eliminating script execution from the rendering pipeline
Solution Approach 2:
The patent creates a serialized JSON-based copy of the data structure that represents the visual scene. Instead of passing script code to the renderer, the system creates a data copy that captures all necessary visual information in a secure, executable-free format. This copying approach maintains operational ease while ensuring security
3Reliability
If serialized data structures are passed instead of script code, then security is improved, but device complexity increases due to need for Scene Graph and Renderer API coordination
Solution Approach 1:
The patent creates a universal Scene Graph data structure that serves multiple functions: it represents the visual scene, captures all rendering parameters, and acts as a secure intermediary between script processing and rendering. This multi-functional data structure reduces overall system complexity by eliminating the need for separate secure communication protocols and simplifying the interface between components
Data Source
AI summary
The disclosed technology includes systems and methods for secure isolation of scripting from graphical representations in a unified charting framework. The technology disclosed relates to a platform for ultra-fast, ad-hoc data exploration and faceted navigation on integrated, heterogeneous data sets. The disclosed apparatus and methods for secure isolation of scripting from graphics make it possible to securely share live data as rendered on a live dashboard, for both desktop and mobile application environments, without saving a new state on a server when time data and dashboard elements are updated. The disclosed unified charting framework makes it possible to target multiple platforms—generating data visualization representations that can be displayed when rendered natively on both desktop and mobile devices, and when rendered in a browser window.