Web Page Digital Assistant Integration With Secure Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in securely integrating digital assistants with web pages due to limited input interfaces on mobile devices and the inability to access necessary input information, leading to inefficiencies and security risks in data transfer and user input.
Innovation Solution
A system utilizing APIs, a JavaScript library, and a contextual suggestions system to enable secure integration of digital assistants with web pages, allowing data transfer and input provision while maintaining security through opaque communication and reduced processor and memory consumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital assistant is integrated with web pages using existing technologies, then user input capabilities are limited due to mobile device interface constraints, but security risks and processing inefficiencies increase
Solution Approach 1:
The patent introduces a data exchange component as an intermediary between the digital assistant and the web page application. This component receives data values from the digital assistant, validates them against the application's data model, and only passes validated data to the web page. This mediator architecture enables user input capabilities while maintaining security by filtering and validating all data transmissions.
Solution Approach 2:
The system implements a feedback mechanism where the data exchange component continuously monitors and validates data flows between the digital assistant and web page. When validation fails or security policies are violated, the system provides feedback to block the transmission. This feedback loop ensures that only secure, validated data reaches the web page while maintaining user input functionality.
2Productivity
If data exchange between digital assistant and web page is enabled, then user input functionality improves, but processor and memory consumption increase
Solution Approach 1:
The data exchange component performs preliminary validation and filtering of data values before they are transmitted to the web page application. By pre-processing and validating data in advance, the system reduces the computational burden on the web page application during runtime. This preliminary action improves overall processing efficiency while minimizing the energy consumption of the web page by avoiding redundant validation operations.
3Reliability
If secure validation policies are implemented for data exchange, then security is improved, but device complexity increases
Solution Approach 1:
The patent extracts the complex validation and security policy enforcement logic from the web page application and concentrates it in the data exchange component. This extraction isolates the complexity to a single, manageable component that handles all security validations. The web page application itself remains simple, as it only needs to communicate with the data exchange component using standardized interfaces, thereby improving security without excessively increasing overall system complexity.
Data Source
AI summary
Secure digital assistant integration with web pages is provided. The system receives an intent manifest data structure that maps actions of a digital assistant with link templates of an electronic resource developed by a third-party developer device. The system validates the electronic resource based on the intent manifest data structure. The system receives, from a data exchange component of an iframe of the electronic resource loaded by a client computing device, an identifier of the client computing device. The system receives a foreground state of the electronic resource from an onsite state sharing API. The system selects a data value for a parameter based on the foreground state and the intent manifest data structure. The system provides the data value. An authorization component generates an authorization prompt, receives input, and transmits the data value to an onsite intent execution API of the electronic resource to execute an action.