WebSocket Server Mediator for Browser Local Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Web applications sandboxed by web browsers face restrictions that prevent them from accessing local applications and data, necessitating the use of NPAPI plug-ins, which are being phased out due to security risks.

Innovation Solution

Implementing a WebSocket server on the same machine as the web browser to serve requests from the web application, allowing it to access and execute local applications and data by establishing a connection and performing authentication, thereby bypassing the browser's access controls.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If web applications use NPAPI plug-ins to access local applications and data, then access capability is improved, but security risk increases

Engineering Contradiction:

Improveaccess capabilityVSAvoidsecurity risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a server as an intermediary component between the web application and local resources. The server receives requests from the web application through the browser, processes them, and accesses local applications and data on behalf of the web application. This mediator architecture allows web applications to access restricted resources without requiring NPAPI plug-ins, thereby maintaining security while enabling functionality.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If web browsers restrict web applications from accessing local resources, then security is improved, but functionality is reduced

Engineering Contradiction:

ImprovesecurityVSAvoidfunctionality

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent moves the resource access functionality from the client-side web application to a server-side component. By transitioning from a browser-based architecture to a server-mediated architecture, the system enables web applications to access local resources through network communication protocols rather than direct browser plug-in access, thus maintaining security restrictions while enabling functionality through a different operational dimension.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

3Speed

If web applications directly access local applications, then response time is improved, but access control is bypassed

Engineering Contradiction:

Improveresponse timeVSAvoidaccess control

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The server acts as a mediator that maintains access control while enabling communication between web applications and local applications. Although the server introduces an additional communication step, it preserves security policies by filtering and managing all access requests. The server can be configured to optimize response times for trusted operations while maintaining strict access control for sensitive resources.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS10152590B2Implementing a WebSocket server to circumvent access controls, by a web browser, on a web application

Publication Date: 2018.12.11 ORACLE INT CORP

AI summary

Operations include executing a WebSocket server on a machine executing a web browser; establishing a connection between the WebSocket server and the web browser; receiving, by the WebSocket server from the web browser, a request requiring execution of a local application on the machine; and executing, by the WebSocket server, the local application to serve the request.