Modifying TURN Server Lists for GDPR Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current RTC protocols, such as WebRTC, lack the ability to selectively allow or block certain WebRTC applications and often require traffic to traverse through TURN servers outside regulatory jurisdictions, leading to inefficiencies and compliance issues, especially in GDPR regions, with no mechanism for end-user modifications to the list of TURN servers.
Innovation Solution
A customized browser and policy server system that allows adding or removing TURN servers from the list provided by the application, enabling end-users to modify the list based on administrative policies, ensuring compliance with regulations and optimizing communication paths by selecting the fastest available TURN servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If TURN servers are provided by the application, then the application can establish peer-to-peer communications, but the application cannot selectively block or allow certain TURN servers and cannot modify the list
Solution Approach 1:
The patent introduces a browser extension as an intermediary component that sits between the WebRTC application and the TURN servers. This extension intercepts the TURN server list provided by the application, modifies it according to administrative policies (adding, removing, or prioritizing specific servers), and then presents the modified list to the WebRTC peer connection. This mediator approach enables selective control over TURN server usage without requiring changes to the original application code.
2Reliability
If traffic traverses through TURN servers outside regulatory jurisdictions, then communications can be established, but compliance with regulations such as GDPR is violated
Solution Approach 1:
The patent implements location-aware TURN server selection by evaluating the geographic jurisdiction of each TURN server against regulatory requirements. The browser extension applies different policies to TURN servers based on their location - for example, blocking servers outside GDPR jurisdictions when operating in EU regions, while allowing servers within compliant jurisdictions. This local quality approach ensures that communications maintain appropriate regulatory compliance based on the user's location and applicable laws.
3Ease of operation
If a customized browser is used to modify TURN server lists, then end-users can control TURN server selection, but the implementation complexity increases
Solution Approach 1:
The browser extension implements self-service functionality by automatically retrieving administrative policies (such as allowed TURN server lists, blocked servers, or prioritization rules) and applying them without requiring manual user configuration. The extension autonomously manages the TURN server list modification process, making it easy for end-users to gain control over TURN server selection while minimizing the operational complexity they would otherwise face.
Data Source
AI summary
Techniques are provided for modifying a list of Traversal Using Relays around Network Address Translators (TURN) servers within a host application. A custom-modified browser is configured to add and/or remove TURN servers underneath a variety of host applications, including, for example, JavaScript WebRTC applications. In some cases, certain applications are permitted and/or denied use of certain TURN servers, based on local administrative policy. In accordance with another embodiment of the present disclosure, a host application can be configured or otherwise modified to use certain TURN servers on certain networks, for example, to prevent traffic from using a TURN server outside a General Data Protection Regulation (GDPR) region.