Webview Content Verification Through Native Bridge Interaction Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to verify whether interactions with digital components within webviews are performed by actual human users or automated entities, and cannot ensure that content provided within webviews originates from the intended content provider, leading to potential compromise of the webview, native application, and client device.
Innovation Solution
Implement a communication bridge between the webview and the native application layer to transmit interaction signals and environment trustworthiness data to a software library, which evaluates the authenticity of user interactions and verifies the content provider, using unique identifiers and encryption to ensure legitimate content delivery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a webview is used to display digital content from content providers, then the application can display web content and interact with servers, but the system cannot verify whether interactions are performed by human users or automated entities, and cannot ensure content originates from the intended content provider
Solution Approach 1:
The patent introduces a communication bridge as an intermediary layer between the webview and native application. This bridge includes a script in the webview that detects interaction signals, transfers them through the bridge to a software library in the native application, which then evaluates whether interactions are human-performed. This intermediary structure enables verification capabilities without compromising the webview's original functionality.
Solution Approach 2:
The system is segmented into distinct components: the webview layer for content display, the communication bridge for signal transfer, the native application layer with software library for evaluation, and the content provider layer. This segmentation allows each component to perform its specialized function while maintaining overall system reliability through coordinated verification.
2Adaptability or versatility
If the webview executes scripts and code from content providers, then the webview can generate graphical user interfaces and enable communication with servers, but malicious code or falsified interactions can compromise the webview, native application, and client device
Solution Approach 1:
The system performs preliminary verification actions before executing content from content providers. The software library in the native application evaluates interaction signals and verifies content provider legitimacy in advance, preventing malicious code execution and falsified interactions from compromising the system. This preliminary action approach blocks threats before they can cause harm.
Solution Approach 2:
The patent converts the potential harm of executing untrusted web content into a benefit by using the same execution capability to detect and evaluate interaction signals. The script that could potentially execute malicious code is instead used to detect interaction patterns and transfer verification data, transforming a security vulnerability into a security feature.
Data Source
AI summary
Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for verifying content provided for display within a webview and interactions with such content. Methods can include providing, within a webview executing in a portion of an application launched on a client device, a first content page including a digital component and detecting, by a script executing within the webview, a set of interaction signals. After detection of the set of interaction signals, the signals can be transferred from the webview, via a communication bridge, to a software library that is resident within the native layer. The software library transmits the set of interaction signals to a first content provider, which can determine whether the interaction signals indicate interactions by an actual human user as opposed to automated interactions. The software library then launches a second content page that is linked to by the digital component.