Web Component Binding via Proxy Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing web security protocols, such as CORS, offer limited control over embedded web components, making them vulnerable to security risks as they may allow malicious access to resources from rogue entities.

Innovation Solution

A system where a content publisher server acts as a proxy, using a gateway to validate requests and generate binding identifiers, ensuring secure communication between the content provider and consumer servers by employing tokens and encryption keys to control access and interactions between web components.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If embedded web components are allowed to access content from different servers, then web functionality and content sharing are improved, but security vulnerabilities and unauthorized access risks increase

Engineering Contradiction:
Improveweb functionalityVSAvoidsecurity vulnerabilities
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a binding mechanism that acts as an intermediary between the parent web component and embedded web components. This binding creates a controlled association that allows the embedded components to access resources from different servers while maintaining security through established parent-child relationships in the DOM hierarchy, thus resolving the contradiction between functionality and security

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements preliminary validation by checking whether embedded web components have a valid binding to a parent web component before allowing access to resources. This pre-access validation ensures that only properly authorized embedded components can communicate with content provider servers, preventing security vulnerabilities before they can exploit the system

Inventive Principle:
Principle #10Preliminary action

2Reliability

If CORS protocol is used to control access, then some security control is achieved, but control over embedded components remains limited and rogue entities can still access resources

Engineering Contradiction:
Improvesecurity controlVSAvoidunauthorized access
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies local quality by implementing binding validation specifically for embedded web components rather than applying uniform CORS controls to all web components. Each embedded component's access rights are determined by its specific binding relationship with a parent component, allowing fine-grained security control that addresses the limitations of general CORS protocols

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent segments the web page structure into parent web components and embedded web components, with distinct access control rules for each segment. The binding mechanism creates separate authorization pathways for embedded components versus regular components, enabling more precise control over which entities can access resources and preventing rogue entities from exploiting generic CORS vulnerabilities

Inventive Principle:
Principle #1Segmentation

3Adaptability or versatility

If embedded components can fetch content from content provider servers, then content supplementation is improved, but visibility and control by the content provider server over the webpage context is reduced

Engineering Contradiction:
Improvecontent supplementationVSAvoidcontext visibility
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent implements feedback by requiring embedded web components to provide binding information back to the content provider server when accessing resources. This feedback mechanism allows the content provider server to verify the component's context and parent-child relationships, maintaining visibility and control over how supplemented content is used within the webpage

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS11736293B1Binding web components to protect accessing of resources
Publication Date: 2023.08.22 CITIGROUP TECHNOLOGY INC
  • US11736293B1 patent drawing
  • US11736293B1 patent drawing
  • US11736293B1 patent drawing

AI summary

Presented herein are systems and methods for binding web components to protect accessing of resources. A first server may receive, from a second server, a request to provide access to content for a first web component on a web application of a customer device. The first server may determine whether to issue an identifier to the customer device responsive to validating the request. The first server may generate, responsive to the determination, the identifier to bind the first web component with a second web component to permit access to the content for the first web component on the web application. The first server may transmit, to the second server, a response including the identifier and the content. The first server may communicate, via the second server, data associated with a user interaction with the content on the first web component bound with the second web component using the identifier.