Server Proxy Inserting Trust Parameters for Cross-Domain AJAX
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network communication systems, particularly those using JavaScript, face limitations in securely retrieving protected information from remote servers due to security models that restrict cross-domain communication, leading to a lack of trust between browsers and remote servers, which prevents the retrieval of personal information and restricts access to data.
Innovation Solution
A system and method that dynamically inserts trustworthy parameters into requests from a client to a remote server through a proxy, establishing a trusted relationship and allowing secure retrieval of protected information, enabling authentication and full access to data without additional login steps.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If JavaScript communicates requests through a proxy to remote servers, then cross-domain access is enabled, but trust relationship cannot be established between browser and remote server
Solution Approach 1:
The patent introduces a server-side intermediary component that acts as a mediator between the browser and remote servers. This intermediary receives requests from the browser, inserts trustworthy parameters to establish credibility with remote servers, and forwards the requests. The intermediary resolves the trust issue by being the sole entity that can authenticate with remote servers on behalf of untrusted browser clients.
Solution Approach 2:
The patent extracts the trust establishment function from the browser-client layer and relocates it to the server-side intermediary. By removing the trust burden from the browser (which cannot establish trust with remote servers) and placing it in the intermediary (which can control what information is sent), the system enables cross-domain access while maintaining security.
2Adaptability or versatility
If identifying information is passed from browser through proxy to remote server, then access to remote data is enabled, but information can be easily viewed and altered
Solution Approach 1:
The server-side intermediary serves as a secure mediator that controls the flow of identifying information. Instead of the browser directly exposing its identifying information to remote servers (where it could be viewed or altered), the intermediary inserts trusted parameters and forwards requests. This ensures that only authenticated, tamper-proof information reaches remote servers.
Solution Approach 2:
The intermediary performs preliminary action by inserting trustworthy parameters into requests before they reach remote servers. This preliminary authentication ensures that identifying information is already verified and secured before any data exchange occurs, preventing subsequent manipulation or unauthorized access.
3Reliability
If JavaScript security model restricts communication to original domain only, then security is maintained, but access to remote server information is blocked
Solution Approach 1:
The patent introduces a server-side intermediary that acts as a mediator, allowing the browser to access remote servers indirectly. The intermediary receives requests from the browser, inserts trustworthy parameters to establish credibility with remote servers, and forwards the requests. This resolves the contradiction by maintaining browser security constraints while enabling extended communication capability through the intermediary's trusted parameters.
Solution Approach 2:
The patent adds a new dimension to the communication architecture by introducing a server-side intermediary layer between the browser and remote servers. This additional dimension allows the system to maintain the original domain restriction for security while enabling cross-domain access through the intermediary's trusted parameters, effectively adding a new layer to the communication model.
Data Source
AI summary
A system for retrieving information from a remote server is disclosed. The system includes a browser having a webpage executing JavaScript adapted to communicate a request with client identifying information to a first server. The first server has a proxy adapted to dynamically insert information into the request received from the client and communicate the request with inserted information to a second server, whereby the request with inserted information is trusted by the second server. The second server and first server are each adapted to also provide a response to the request. A method of communicating in a networked environment is also disclosed.