# US 12,001,540 B2 · Systems and methods for integrating with a native component using a network interface > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,001,540 B2 - Document ID: US12001540B2 - Status: Granted - Kind: B2 - Application number: 18/349,128 - Filed: 2023-07-08 - Published: 2024-01-11 - Granted: 2024-06-04 - Earliest claimed: 2015-01-21 - Assignees: Open Text SA ULC - Applicants: Open Text SA ULC - Inventors: Jonathan Carroll; Michel Gagnon; Gregory Pekofsky; Khanh Tuan Vu - Web page: https://patentgrep.com/patent/US12001540B2 ## CPC - G06F 21/44: Program or device authentication - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Embodiments as disclosed herein may provide systems and methods for component integration and security. In particular, in one embodiment, a native component that presents a network based interface may be on a device, where that native component may expose a network based interface for access by other components. This native component can then be accessed through the network based interface. To address security concerns and other issues, the native component may be configured to determine if a received request is associated with the same user space and only respond to requests originating from the same user space. ## Claims ### Claim 1 A system, comprising: a device comprising: a first component providing a network interface adapted to allow functionality of the first component to be accessed via the network interface; and a non-transitory computer readable medium, comprising instructions for: receiving, at the first component, a request from a requesting second component executing on the device, the request received via the network interface provided by the first component; determining, by the first component, a first user session identifier associated with the execution of the first component on the device; determining a connection associated with the request received from the requesting second component; determining a process identifier associated with the requesting second component based on the determined connection associated with the request; using the determined first user session identifier and the determined process identifier, determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier; and in response to determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, determining whether to allow the request. ### Claim 2 (depends on 1) The system of claim 1, wherein if the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, allowing the request. ### Claim 3 (depends on 2) The system of claim 2, wherein the first component is adapted to service the allowed request. ### Claim 4 (depends on 3) The system of claim 3, wherein the first component is adapted to return a result after servicing the allowed request. ### Claim 5 (depends on 1) The system of claim 1, wherein if the request did not originate from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, not allowing the request. ### Claim 6 (depends on 1) The system of claim 1, wherein the first component is adapted to listen to local ports of the device. ### Claim 7 (depends on 6) The system of claim 6, wherein the first component is adapted to only accept connection requests from a local host interface. ### Claim 8 A method, comprising: receiving, at a network interface of a first component on a device, a request from a requesting component residing locally on the device; allowing functionality of the first component to be accessed through the network interface; determining, by the first component, a first user session identifier associated with the execution of the first component on the device; determining a connection associated with the request received from the requesting component; determining a process identifier associated with the requesting component based on the determined connection associated with the request; using the determined first user session identifier and the determined process identifier, determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier; and in response to determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, determining whether to allow the request. ### Claim 9 (depends on 8) The method of claim 8, wherein if the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, allowing the request. ### Claim 10 (depends on 9) The method of claim 9, wherein the first component is adapted to service the allowed request. ### Claim 11 (depends on 10) The method of claim 10, wherein the first component is adapted to return a result after servicing the allowed request. ### Claim 12 (depends on 8) The method of claim 8, wherein if the request did not originate from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, not allowing the request. ### Claim 13 (depends on 8) The method of claim 8, wherein the first component is adapted to listen to local ports of the device. ### Claim 14 (depends on 13) The method of claim 13, wherein the first component is adapted to only accept connection requests from a local host interface. ### Claim 15 A non-transitory computer readable medium, comprising instructions for: receiving, at a network interface of a first component on a device, a request from a requesting component residing locally on the device; allowing functionality of the component to be accessed through the network interface; determining, by the first component, a first user session identifier associated with the execution of the first component on the device; determining a connection associated with the request received from the requesting component; determining a process identifier associated with the requesting component based on the determined connection associated with the request; using the determined first user session identifier and the determined process identifier, determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier; and in response to determining whether the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, determining whether to allow the request. ### Claim 16 (depends on 15) The non-transitory computer readable medium of claim 15, wherein if the request originated from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, allowing the request. ### Claim 17 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the first component is adapted to service the allowed request. ### Claim 18 (depends on 17) The non-transitory computer readable medium of claim 17, wherein the first component is adapted to return a result after servicing the allowed request. ### Claim 19 (depends on 18) The non-transitory computer readable medium of claim 18, wherein if the request did not originate from a user space on the first component that is associated with both the determined first user session identifier and the determined process identifier, not allowing the request. ### Claim 20 (depends on 15) The non-transitory computer readable medium of claim 15, wherein the first component is adapted to listen to local ports of the device. ### Claim 21 (depends on 20) The non-transitory computer readable medium of claim 20, wherein the first component is adapted to only accept connection requests from a local host interface.