Communicating between browser and a native application securely

I am working on web application that needs data it can only get from its locally installed native application brother.

How can you get around the browser sandbox so that you can communicate (securely, since the data is potentially sensitive), with a native application.

The only example that I found had the user manually move some tokens and files between the two, which is a horrible user experience that i would like to avoid.