Secure URL-App Association via Signed Validation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing web technologies fail to securely associate links between web pages and applications, leading to content being displayed within the web browser instead of the corresponding app, even if the app is installed on the same device.
Innovation Solution
A method is introduced to securely associate a link between two applications by using a signed list of URLs or URIs, validated by a trusted system component, allowing a website to control which apps can access specific domains and paths, enabling content from a selected link to be displayed within the appropriate app instead of the web browser.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a link from a web page is opened in a web browser, then the content can be displayed, but the content cannot be displayed within the corresponding application even if it is installed on the same device
Solution Approach 1:
The patent introduces an intermediary mechanism (URL association data structure and validation system) that mediates between the web browser and the application. When a URL is selected, the system checks the association data structure to determine whether to open the content in the browser or launch the corresponding application, enabling reliable content display in the appropriate environment.
Solution Approach 2:
The patent implements preliminary action by pre-establishing URL associations with applications during application installation or configuration. The association data structure is prepared in advance, containing validated mappings between specific URLs and target applications, so that when a URL is selected, the correct application can be immediately launched without requiring real-time determination.
2Adaptability or versatility
If any application can associate with any URL, then content can be displayed in the appropriate app, but security risks increase due to potential unauthorized associations
Solution Approach 1:
The patent implements feedback through a validation mechanism that checks URL associations against a trusted data structure before allowing an application to handle a URL. The system provides feedback by validating whether the association is authorized, preventing unauthorized applications from intercepting URLs and thereby mitigating security risks while maintaining flexible associations.
Solution Approach 2:
The patent introduces an intermediary validation system that acts as a security gate between URLs and applications. The association data structure serves as an intermediary layer that verifies whether a given URL-application pairing is authorized, allowing flexible associations while blocking unauthorized ones, thus resolving the security concern.
3Reliability
If a secure validation system is implemented to control URL associations, then unauthorized associations are prevented, but system complexity increases
Solution Approach 1:
The patent uses copying by maintaining a data structure that replicates or mirrors the authorized URL associations. Instead of implementing complex real-time validation logic, the system copies the association information into a searchable data structure that can be efficiently queried, simplifying the validation process while maintaining security.
Solution Approach 2:
The patent applies preliminary action by pre-validating and storing URL associations in a data structure before they are needed. The complex validation logic is executed in advance during application installation or configuration, and the results are stored for quick lookup, reducing the complexity of real-time validation operations.
Data Source
AI summary
Methods and systems for associating, in a secure manner, a link between web sites (or other network resources) and installed applications. In one embodiment, a signed list of one or more URLs is downloaded and validated to establish an association, which is stored in a data structure, between a first application and a second application. In response to receiving a selection of a URL in the second application, comparing the selected URL to URLs in the data structure and displaying, in the first application, content of the selected URL in response to determining that at least a prefix portion of the selected URL matches one of the URLs associated with the first application in the data structure.