Web Application Object Descriptor for Secure Copy Paste
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Web applications face challenges in efficiently processing copy and paste requests, as rendering entire server-side objects can expose sensitive implementation details, making it difficult to recreate the object on the server when pasting, leading to potential loss of sensitive information.
Innovation Solution
Generating an object descriptor that represents a fully defined server-side object, excluding sensitive details, which is transmitted to the client, allowing for secure duplication and display without exposing internal implementation details.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the entire server-side object is rendered and transmitted to the client, then the client can copy and paste the object, but sensitive implementation details are exposed
Solution Approach 1:
The patent extracts only the necessary visual representation and functional properties of the server-side object for client-side copying, while leaving sensitive implementation details on the server. The object descriptor contains only non-sensitive attributes needed for display and basic interaction, separating the public interface from the private implementation.
Solution Approach 2:
The object is segmented into multiple parts: the object descriptor (containing public attributes for client-side operations), the implementation details (remaining on server), and the visual representation (transmitted to client). This segmentation allows copy-paste functionality while protecting sensitive segments.
2Adaptability or versatility
If the entire server-side object is rendered to enable pasting, then the object can be recreated on the server, but sensitive implementation details are lost in the process
Solution Approach 1:
The object descriptor acts as an intermediary that enables object recreation without exposing sensitive details. It contains sufficient information for creating functional copies while filtering out sensitive implementation specifics, serving as a safe mediator between the client's paste operation and the server's object recreation process.
Solution Approach 2:
Instead of copying the entire server-side object including sensitive details, the system creates a simplified object descriptor copy that contains only non-sensitive attributes. This allows the client to paste and the server to recreate functional equivalents without transferring or exposing sensitive implementation information.
3Object-affected harmful factors
If only a representation of the server-side object is transmitted to the client, then sensitive information is protected, but the object cannot be accurately recreated on the server
Solution Approach 1:
The object descriptor extracts and contains only the essential attributes needed for accurate functional recreation of the object on the server, while excluding sensitive implementation details. This selective extraction maintains recreation accuracy for functional purposes without compromising security.
Solution Approach 2:
The object descriptor serves as an intermediary data structure that bridges the gap between security requirements and recreation accuracy. It contains precisely the right amount of information - sufficient for accurate functional recreation but filtered to exclude sensitive details - enabling both goals to be achieved.
Data Source
AI summary
A method, system and article of manufacture for processing requests in web applications and, more particularly, for processing requests between two different applications. One embodiment provides a computer-implemented method of processing a copy request in a distributed environment including at least a first and a second application. The method comprises receiving, from the first application, a copy request for a copy of a selected object. A fully defined instance of the selected object resides in the second application and only a representation of the fully defined instance resides in the first application. The method further comprises generating, by the second application, an object descriptor representing the fully defined instance. At least a portion of the fully defined instance is excluded in the object descriptor. The object descriptor is transmitted from the second to the first application. Thereby, access by the first application to the fully defined instance is prevented.