Browser Device Access Proxy

• US 20140282862A1
• Filed: 10/18/2012
• Published: 09/18/2014
• Est. Priority Date: 10/28/2011
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Persson, Per, Olsson, Magnus L., Yuan, Song
• Granted Patent: US 9,692,760 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 21/82 Protecting input, output or interconnection devices
• CPC Class Codes: G06F 21/83 input devices, e.g. keyboards, mice or controllers thereof
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2221/2123 Dummy operation
• CPC Class Codes: G06F 2221/2127 Bluffing
• CPC Class Codes: G06F 3/0484 for the control of specific functions or operations, e.g. selecting or manipulating an object, an image or a displayed text element, setting a parameter value or selecting a range
• CPC Class Codes: H04L 12/1822 Conducting the conference, e.g. admission, detection, selection or grouping of participants, correlating users to one or more conference sessions, prioritising transmission
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In a web browser (100) access is controlled with respect to at least one user data providing device (102), the web browser comprising a browser engine (106), a browser application (104) and a device access proxy, DAP (108). Access is acquired, in the DAP, to at least one user data providing device and a request is received from a web application (110) for user data from a first user data providing device. In response to the request, default data (112) is transmitted from the to the web application. A user data access confirmation signal is obtained, and in response to the user data access confirmation signal, the transmission of the default data is discontinued and the requested user data is transmitted from the DAP to the web application.

Claims

1-15. -15. (canceled)

16. A method in a web browser for controlling access to at least one user data providing device, the web browser comprising a browser engine, a browser application and a device access proxy (DAP), wherein the method comprises:

acquiring, in the DAP, access to at least one user data providing device;

receiving, in the DAP, a request from a web application for user data from a first user data providing device;

in response to the request, transmitting default data from the DAP to the web application;

obtaining, in the DAP, a user data access confirmation signal; and

in response to the user data access confirmation signal, discontinuing the transmission of the default data and transmitting the requested user data from the DAP to the web application.

17. The method of claim 16, wherein the acquiring of access to at least one user data providing device comprises disabling the web application from accessing the at least one user data providing device.

18. The method of claim 16, wherein the obtaining of a user data access confirmation signal comprises receiving user input from the browser application.

19. The method of claim 16, wherein the obtaining of a user data access confirmation signal comprises receiving a signal from a DAP policy function.

20. The method of claim 16, comprising:

detecting, in the browser application, a selection of a second user data providing device; and

,

in response to the detected selection, discontinuing any transmission to the web application and transmitting user data provided by the second user data providing device from the DAP to the web application.

21. The method of claim 16, comprising:

obtaining, from a DAP policy function, a selection of a second user data providing device; and

,

in response to the obtained selection, discontinuing any transmission to the web application and transmitting user data provided by the second user data providing device from the DAP to the web application.

22. The method of claim 19, wherein the DAP policy function comprises rules that regulate trust levels associated with web applications.

23. The method of claim 19, wherein the policy function comprises a function to receive rule settings from a user.

24. The method of claim 19, wherein the policy function comprises rules that regulate content of the default data.

25. The method of claim 16, wherein the user data comprises any of:

image data, a video sequence, an audio sequence, position information, sensor data.

26. The method of claim 16, comprising acquiring, in the DAP, the default data from a default data source.

27. The method of claim 26, wherein the acquiring of the default data comprises any of:

acquiring a video sequence;

acquiring an audio sequence; and

acquiring at least one still image.

28. The method of claim 26, wherein the acquiring, in the DAP, of the default data is performed as a reaction to a detection of a user data providing device being available.

29. A non-transitory computer-readable medium comprising, stored thereupon, software instructions that, when executed in a processor providing a web browser for controlling access to at least one user data providing device, the web browser comprising a browser engine, a browser application and a device access proxy (DAP), cause the processor to:

acquire, in the DAP, access to at least one user data providing device;

receive, in the DAP, a request from a web application for user data from a first user data providing device;

in response to the request, transmit default data from the DAP to the web application;

obtain, in the DAP, a user data access confirmation signal; and

in response to the user data access confirmation signal, discontinue the transmission of the default data and transmitting the requested user data from the DAP to the web application.

30. An apparatus comprising processing circuitry configured to provide a web browser for controlling access to at least one user data providing device, the web browser comprising a browser engine, a browser application and a device access proxy (DAP), wherein the processing circuitry is further configured to:

acquire, in the DAP, access to at least one user data providing device;

receive, in the DAP, a request from a web application for user data from a first user data providing device;

in response to the request, transmit default data from the DAP to the web application;

obtain, in the DAP, a user data access confirmation signal; and

in response to the user data access confirmation signal, discontinue the transmission of the default data and transmitting the requested user data from the DAP to the web application.