Webkit Kernel Process Isolation for Browser Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Webbrowser kernel in existing browsers, such as Internet Explorer, has security issues, supports only Microsoft platforms, and has a high technical threshold, making it difficult to upgrade and results in oversized installation packages when directly using the WebKIT kernel for webpage browsing.
Innovation Solution
A method and device for providing webpage browsing using a WebKIT kernel across processes, which exports a page object interface, starts the WebKIT kernel in a separate process, and allows third-party software to create a WebKIT-based page object for browsing operations, simplifying the development and security by isolating processes and encapsulating complex operations like network requests and JavaScript parsing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the Webbrowser kernel is used directly in third-party software, then webpage browsing function is achieved, but security issues arise and technical threshold increases
Solution Approach 1:
The patent introduces a WEBKIT kernel as an intermediary component that operates in a separate process. Third-party software does not directly use the browser control but instead interacts with the WEBKIT kernel through defined interfaces, creating a security boundary that isolates potential vulnerabilities while maintaining functionality.
Solution Approach 2:
The patent divides the browser functionality into separate processes: the WEBKIT kernel runs in one process while third-party software runs in another. This segmentation isolates security risks to the kernel process, preventing them from affecting the third-party software, thereby improving overall system security without increasing the complexity of using the browser control.
2Reliability
If the Webbrowser control is used, then webpage browsing is enabled, but security is poor and easily induces security issues
Solution Approach 1:
The WEBKIT kernel serves as a secure intermediary that handles all webpage browsing operations. By placing the kernel in a separate process with controlled interfaces, the patent creates a containment zone where security issues are isolated, preventing them from propagating to third-party software while maintaining the necessary browsing functionality.
3Adaptability or versatility
If WebKIT kernel is used directly, then non-MICROSOFT platform support is achieved, but installation package size becomes oversized
Solution Approach 1:
The patent extracts only the essential WEBKIT kernel functionality needed for platform support, separating it from the full browser control. This allows third-party software to access core WEBKIT capabilities without incorporating the entire browser control, thereby reducing installation package size while maintaining multi-platform adaptability.
4Adaptability or versatility
If Webbrowser object is used, then compatibility with existing software is maintained, but version upgrades are difficult and technical threshold is high
Solution Approach 1:
The patent implements a dynamic architecture where the WEBKIT kernel can be upgraded independently without affecting existing third-party software. The kernel maintains backward-compatible interfaces while allowing version updates, enabling seamless upgrades that do not increase technical thresholds or break compatibility with existing software.
Data Source
AI summary
The invention discloses a method and device for providing webpage browsing based on a Webkit kernel to solve the problem of poor security resulting from using the kernel control of Webbrowser. The method comprises: setting a page object exporting interface of the Webkit kernel; starting the Webkit kernel in a first independent process; invoking the page object exporting interface to create a Webkit kernel based page object in a second independent process; and invoking a Webkit kernel in the first independent process via the page object to conduct a page browsing operation and page content loading based on the Webkit kernel. The present application can well solve the problems that in a browser the version of the Webbrowser kernel lags, the security thereof is poor, and it does not support a non-Microsoft platform, as well as the problems of a high technical threshold, difficult upgrade, an oversized installation package, etc. resulting from directly using the webkit kernel.