Virtual UI Character Editing for Secure Low-Latency BYOD Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Companies face challenges in securely incorporating personal devices like smartphones and tablets into secure computing environments without burdening employees with management software that restricts personal device use, and existing solutions are costly and complex.
Innovation Solution
A system and method for facilitating character editing on a physical device by interacting with a virtual device user interface, involving a client device that captures and sends specific character sets to a virtual device for editing, while maintaining security by storing confidential data remotely and minimizing network latency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If management software is loaded onto personal devices to protect confidential information, then security is improved, but device usability and employee freedom deteriorate
Solution Approach 1:
The system divides the device into two distinct environments: a secure container for confidential information and applications, and a personal zone for unrestricted user activities. This segmentation allows security policies to be applied only where necessary while preserving full usability in the personal zone.
Solution Approach 2:
The secure environment is extracted as a separate, isolated container within the personal device. Confidential data and applications are taken out from the general device environment and placed into this secured container with its own dedicated resources and security policies.
2Reliability
If dedicated company-owned devices are provided to employees, then security is improved, but cost and complexity increase
Solution Approach 1:
The system merges the benefits of company-owned devices (security, controlled applications) with personal device convenience (familiar interface, no restriction on personal use). Employees use their own devices while the company maintains a secure container with controlled resources and applications.
Solution Approach 2:
The secure container implementation provides universal security across multiple personal devices without requiring device-specific infrastructure. The same security model can be deployed on various smartphone and tablet platforms, reducing complexity compared to managing dedicated hardware.
3Reliability
If character editing is performed through virtual device interface, then data security is improved, but network latency increases
Solution Approach 1:
The system implements local quality by processing character editing operations within the secure container environment rather than through remote virtual device interfaces. The keyboard application and text editing occur locally in the container, eliminating network round-trips for each keystroke while maintaining data security through container isolation.
Solution Approach 2:
The secure container acts as an intermediary layer between the personal device environment and the company's confidential data. It provides a controlled interface where character editing can occur with security policies enforced, reducing the need for continuous network communication while maintaining security boundaries.
Data Source
AI summary
In certain embodiments, a message including a plurality of characters may be obtained from an application hosted on a physical client device and a first position of a user interaction with a user interface accessed via the application may be obtained, where the user interface displays the message. A second position within the message may be determined based on the first position. A first and second set of characters may be extracted from the message based on the second position, such that (i) a first number of characters prior to the second position within the message is extracted for the first set of characters and (ii) a second number of characters subsequent to the second position within the message is extracted for the second set of characters. The first and second set of characters may be sent to the physical client device.