Web Application Security via Containerized Management SDK
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for securing enterprise emails, presentations, and documents across multiple applications are inefficient, requiring individual modifications and redundant storage of security protections, leading to time consumption and excessive storage usage.
Innovation Solution
Implementing web application security through containerization, where a single management SDK is used to execute web applications within sandboxed environments, applying security policies and user credentials for persistent access, and enabling data loss prevention settings across multiple applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If individual security protections are included in each application, then security coverage is improved, but storage space is excessively consumed and modification time increases
Solution Approach 1:
The patent merges security protections from multiple individual applications into a single centralized security module. This module is shared across all applications, providing uniform security coverage without duplicating security code in each application. The centralized module consolidates authentication, authorization, and security policies into one location, reducing overall storage requirements while maintaining comprehensive security protection.
Solution Approach 2:
The patent creates a universal security module that serves multiple applications simultaneously. This single module provides security functionalities (authentication, encryption, access control) that were previously distributed across individual applications. By making the security component universal and reusable, the system reduces redundant storage while ensuring consistent security coverage across all applications.
2Reliability
If individual security modifications are made to each application, then security customization is improved, but administrative time and complexity increase
Solution Approach 1:
The patent extracts security functionalities from individual applications and places them in a separate, standalone security module. This extraction allows security to be managed independently from application development, enabling administrators to configure and update security policies without modifying each application individually. The modular separation reduces administrative overhead while preserving customization capabilities through configuration files or policy management interfaces.
Solution Approach 2:
The universal security module provides a single point of configuration for all applications, allowing administrators to customize security policies once and have them applied across the entire system. This eliminates the need to repeatedly modify each application individually, significantly reducing administrative time while maintaining the ability to tailor security settings for different applications through centralized policy management.
3Adaptability or versatility
If security protections are distributed across multiple applications, then application independence is improved, but system complexity and maintenance difficulty increase
Solution Approach 1:
The patent segments the system into independent application components and a separate security component. Applications remain independent and focused on their core functionality, while security is handled by a dedicated module. This segmentation reduces system complexity by clearly defining boundaries and responsibilities, making maintenance easier without compromising application independence.
Solution Approach 2:
The patent introduces an intermediary security module that acts as a mediator between applications and the security infrastructure. This intermediary handles all security-related operations, allowing applications to maintain their independence while still receiving comprehensive security protection. The mediator pattern simplifies the system architecture by centralizing security logic and reducing direct security dependencies in each application.
Data Source
AI summary
Disclosed are various examples for web application security through containerization. In one example, a web application is executed within a container application. The container application includes a management software development kit (SDK). A security policy for the web application is retrieved from a management service. The security policy is applied to the web application using the management SDK of the container application.