WebVPN Proxy Server Using Browser Mediation Without Domain Rewriting
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing WebVPN systems face issues with domain name mapping and rewriting failures, leading to access failures and exposure of intranet information, affecting user experience and security.
Innovation Solution
A method and proxy server for WebVPN that intercepts user input events, processes them at a second browser on the server, and acquires resources from the source station without rewriting domain names, using a monitoring script to present the content securely to the client, while maintaining the integrity of intranet information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If domain name mapping and rewriting is implemented in WebVPN, then access can be routed to proxy node, but domain name rewriting may fail or partially fail causing access to fail routing to proxy node
Solution Approach 1:
The patent extracts the domain name rewriting function from the proxy server and replaces it with a browser automation approach. The second browser on the server automatically acquires resources from the source station using event-driven navigation, eliminating the need for domain name mapping and rewriting operations while maintaining proxy functionality.
Solution Approach 2:
The patent introduces a second browser as an intermediary between the client and source station. This browser automation system acts as a mediator that automatically navigates to resources, captures content, and returns it to the client, replacing the complex domain name rewriting mechanism with a simpler browser-mediated approach.
2Ease of operation
If domain name rewriting is implemented, then proxy function is achieved, but intranet information exposure risk increases due to rewriting failures
Solution Approach 1:
The patent removes the domain name rewriting operation from the system, replacing it with browser automation that directly accesses resources. This extraction eliminates the security vulnerability where failed rewriting could expose intranet information, while maintaining the ability to route traffic through the proxy server.
Solution Approach 2:
The patent uses a second browser to copy and render the web page content from the source station, then returns this copied content to the client. This approach avoids exposing the original source station's domain names and structure, preventing information leakage while maintaining functional equivalence.
3Adaptability or versatility
If JavaScript splicing is used to determine domain names, then resource links can be dynamically generated, but domain name determination fails leading to access failure
Solution Approach 1:
The patent enables the second browser to automatically perform resource acquisition and navigation tasks without requiring manual domain name construction or JavaScript splicing. The browser self-service mechanism automatically determines and accesses resource links through event-driven navigation, eliminating the need for complex domain name generation logic while ensuring reliable access.
4Speed
If user input events are directly processed by client browser, then user interaction is responsive, but security control over intranet access is reduced
Solution Approach 1:
The patent introduces the server-side second browser as an intermediary that receives user input events from the client, processes them through automated browser actions, and returns results. This intermediary mechanism maintains responsive user interaction while providing centralized security control and monitoring of all intranet access requests through the proxy server.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Embodiments of the present disclosure relate to the field of communication technology, and disclose a resource acquisition method, including: receiving a user input event from a first browser on a client; acquiring an event result triggered at a second browser by the user input event, where the second browser runs on the server for WebVPN; acquiring, using the second browser, resources from a source station according to the event result; and feeding back the resources to the client, to present the resources at the first browser. Embodiments of the present disclosure further disclose a proxy server for WebVPN, a resource acquisition system, and a server.