Implementing a WebSocket server to circumvent access controls, by a web browser, on a web application

Patent metadata

Field	Value
Publication number	US-10152590-B2
Application number	US-201615159572-A
Country	US
Kind code	B2
Filing date	May 19, 2016
Priority date	Jan 4, 2016
Publication date	Dec 11, 2018
Grant date	Dec 11, 2018

Abstract

Operations include executing a WebSocket server on a machine executing a web browser; establishing a connection between the WebSocket server and the web browser; receiving, by the WebSocket server from the web browser, a request requiring execution of a local application on the machine; and executing, by the WebSocket server, the local application to serve the request.

First claim

What is claimed is:

1. A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising:
executing a WebSocket server on a machine executing a web browser, the WebSocket server using a protocol allowing for full-duplex communication between the WebSocket server and the web browser;
establishing a connection between the WebSocket server and the web browser;
receiving, via the connection by the WebSocket server from a web application executed by the web browser, a request requiring execution of a local application on the machine, the local application being inaccessible by the web application, wherein the web browser sandboxes the web application;
responsive to the request: executing, by the WebSocket server, the local application to serve the request, wherein the WebSocket server, the web browser and the local application are executed on the machine.

2. The non-transitory computer readable medium of claim 1 , wherein the connection between the Web Socket server and the web browser is established in response to a user successfully logging into a system, associated with the Web Socket server, via the web browser.

3. The non-transitory computer readable medium of claim 1 , wherein the request is received by the Web Socket server responsive to:
displaying, via the web application, a user interface; and
receiving, via the user interface, a request from a user to execute the local application.

4. The non-transitory computer readable medium of claim 1 , wherein the operations further comprise, prior to receiving the request by the Web Socket server, executing authentication between the Web Socket server and the web application.

5. The non-transitory computer readable medium of claim 1 , wherein the request comprises one or more of: modifying a document, composing and sending an email, or forwarding communication to a computer system in a set of computer systems comprising the machine.

6. The non-transitory computer readable medium of claim 1 , wherein:
the connection between the Web Socket server and the web browser is established in response to a user successfully logging into a system, associated with the Web Socket server, via the web browser;
the web browser sandboxes the web application;
the request is received by the Web Socket server responsive to:
displaying, via the web application, a user interface; and
receiving, via the user interface, a request from a user to execute the local application;

the request comprises one or more of: modifying a document, composing and sending an email, or forwarding communication to a computer system in a set of computer systems comprising the machine; and
the operations further comprise, prior to receiving the request by the Web Socket server, executing authentication between the Web Socket server and the web application.

7. A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising:
detecting at least one user successfully logging into a system via a web application executed by a web browser;
responsive to detecting the at least one user successfully logging into the system: initiating execution of a WebSocket server, associated with the system, on a particular machine that is executing the web browser;
receiving, by the WebSocket server from the web application via the web browser, a request requiring execution of a local application on the particular machine, the local application being inaccessible by the web application, wherein the web browser sandboxes the web application;
responsive to the request: executing, by the WebSocket server, the local application to serve the request, wherein the WebSocket server, the web browser and the local application are executed on the particular machine.

8. The non-transitory computer readable medium of claim 7 , wherein the request is received by the Web Socket server responsive to:
displaying, via the web application, a user interface; and
receiving, via the user interface, a request from a user to execute the local application.

9. The non-transitory computer readable medium of claim 7 , wherein the operations further comprise, prior to receiving the request by the Web Socket server, executing authentication between the Web Socket server and the web application.

10. The non-transitory computer readable medium of claim 7 , wherein the request comprises one or more of: modifying a document, composing and sending an email, or forwarding communication to a computer system in a set of computer systems comprising the particular machine.

11. A non-transitory computer readable medium comprising instructions which, when executed by one or more hardware processors, cause performance of operations comprising:
executing a WebSocket server on a machine executing a web browser;
establishing a connection between the WebSocket server and the web browser;
receiving, by the Web Socket server from the web browser, a request requiring execution of a local application on the machine, the local application being inaccessible by a web application executed by the web browser, wherein the web browser sandboxes the web application;
responsive to the request: executing, by the WebSocket server, the local application to serve the request, wherein the WebSocket server, the web browser and the local application are executed on the machine.

12. The non-transitory computer readable medium of claim 11 , wherein receiving the request from the web browser comprises receiving the request from the web application executed by the web browser.

13. The non-transitory computer readable medium of claim 12 , wherein the web application is restricted from executing the local application.

14. The non-transitory computer readable medium of claim 12 , wherein the request is received by the Web Socket server responsive to:
displaying, via the web application, a user interface; and
receiving, via the user interface, a request from a user to execute the local application.

15. The non-transitory computer readable medium of claim 12 , wherein the operations further comprise, prior to receiving the request by the Web Socket server, executing authentication between the Web Socket server and the web application.

16. The non-transitory computer readable medium of claim 11 , wherein the connection between the Web Socket server and the web browser is established in response to a user successfully logging into a system, associated with the Web Socket server, via the web browser.

17. The non-transitory computer readable medium of claim 11 , wherein the request comprises one or more of: modifying a document, composing and sending an email, or forwarding communication to a computer system in a set of computer systems comprising the machine.

Assignees

• Oracle Int Corp

Inventors

• Liu Yuting
• Li Mingjie
• Kumar Darshan
• Huang Kuangyang
• Yu Tsunghsi
• Kumar Kunal
• Dong Qiang

Classifications

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• H04L63/00

  Network architectures or network communication protocols for network security (cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00) · CPC title

• G06F2221/2149

  Restricted operating environment · CPC title

• G06F17/30

  Physics · mapped topic

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title