Web Page Digital Assistant Integration With Secure Intent Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in securely integrating digital assistants with web pages on client computing devices with limited input interfaces, particularly in maintaining secure communication and efficient data transfer while providing user input for third-party electronic resources.
Innovation Solution
A system utilizing application programming interfaces, a JavaScript library, and a contextual suggestions system to securely integrate digital assistants with web pages, enabling data transfer and user input through voice navigation and response, while preventing third-party access to sensitive data until authorized.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital assistant integration is implemented in web pages, then user input capabilities are enhanced, but security risks increase due to third-party access to sensitive data
Solution Approach 1:
The patent introduces a data exchange component as an intermediary between the third-party electronic resource and the digital assistant. This component acts as a secure mediator that controls and monitors data flow, allowing the digital assistant to provide voice-based input while preventing unauthorized access to sensitive information. The intermediary validates and filters communications, resolving the security concern while maintaining enhanced user input capabilities.
2Productivity
If third-party electronic resources are integrated with digital assistants, then processing efficiency is improved, but processor and memory consumption increase
Solution Approach 1:
The patent implements a validation policy that applies partial action by selectively validating only the necessary portions of third-party electronic resources for digital assistant integration. Rather than fully processing and loading all third-party resources, the system validates and loads only the specific components needed for voice input and data exchange, reducing overall processor and memory consumption while maintaining processing efficiency for the critical functions.
3Productivity
If data exchange components are authorized to access client computing device identifiers, then data transfer capability is improved, but security vulnerabilities increase
Solution Approach 1:
The patent implements preliminary action by obtaining user authorization before the data exchange component accesses the client computing device identifier. The system proactively requests and stores user consent in advance, which is then used to validate subsequent data exchange operations. This preliminary authorization step ensures that data transfer capability is improved while security vulnerabilities are mitigated through pre-established user permission.
Data Source
AI summary
Secure digital assistant integration with web pages is provided. The system receives an intent manifest data structure that maps actions of a digital assistant with link templates of an electronic resource developed by a third-party developer device. The system validates the electronic resource based on the intent manifest data structure. The system receives, from a data exchange component of an iframe of the electronic resource loaded by a client computing device, an identifier of the client computing device. The system receives a foreground state of the electronic resource from an onsite state sharing API. The system selects a data value for a parameter based on the foreground state and the intent manifest data structure. The system provides the data value. An authorization component generates an authorization prompt, receives input, and transmits the data value to an onsite intent execution API of the electronic resource to execute an action.