Back to results
US 10,333,975 B2Granted
Enhanced computing system security using a secure browser
AssigneeVMware, Inc.
InventorsSisimon Soman, Anurag Katiyar
Life of this patent
Estimating the term…
Abstract
Described herein are systems, methods, and software to provide secure browsers to end user devices. In one implementation, a secure browsing service receives, over a network, a request for an internet browser from an end user device. The secure browsing service further, in response to the request, allocates a virtual machine with an instance of the internet browser executing thereon to the end user device, and provide a remote connection to the internet browser on the virtual machine to the end user device.
Claims17
A method of providing secure browsers to end user devices, the method comprising:
- in a secure browsing service, receiving, over a network, a request for an internet browser from an end user device;
- in response to the request, allocating a virtual machine on a server to the end user device, the virtual machine having an instance of the internet browser executing thereon;
- providing a remote connection to the internet browser on the virtual machine to the end user device that enables the end user device to remotely access the internet browser operating on the virtual machine on the server over the network while locally displaying an interface of the internet browser;
- mapping a file storage location on the end user device to the internet browser of the virtual machine;
- identifying a download request for an object in the internet browser on the virtual machine;
- identifying a rule set for download requests in the internet browser, wherein the rule set comprises a set of one or more file types approved for download;
- determining whether a download of the object associated the download request is permitted based on the rule set and a file type of the object;
- and
- if the download request is permitted, downloading the object to the file storage location from the internet browser of the virtual machine.
6 more elements
A computer apparatus comprising:
- one or more computer readable storage media;
- a processing system operatively coupled with the one or more computer readable storage media;
- and
- program instructions stored on the one or more computer readable storage media to provide secure browsers to end user devices that, when read and executed by the processing system, direct the processing system to:
- receive, over a network, a request for an internet browser from an end user device;
- in response to the request, allocate a virtual machine on a server to the end user device, the virtual machine having an instance of the internet browser executing thereon to the end user device;
- provide a remote connection to the internet browser on the virtual machine to the end user device that enables the end user device to remotely access the internet browser operating on the virtual machine on the server over the network while locally displaying an interface of the internet browser;
- map a file storage location on the end user device to the internet browser of the virtual machine;
- identify a download request for an object in the internet browser on the virtual machine;
- identify a rule set for download requests in the internet browser, wherein the rule set comprises a set of one or more file types approved for download;
- determine whether a download of the object associated the download request is permitted based on the rule set and a file type of the object;
- and
- if the download request is permitted, download the object to the file storage location from the internet browser of the virtual machine.
10 more elements
An apparatus comprising:
- one or more computer readable storage media;
- program instructions stored on the one or more computer readable storage media to request and receive remote browsing instances on an end user device that, when read and executed by a processing system direct the processing system to:
- identify a secure browsing event;
- in response to the secure browsing event, transfer a request over a network for an internet browser to a secure browsing service;
- receive, over the network, a remote connection to an internet browser executing in a virtual machine of the secure browsing service, wherein the remote connection enables the end user device to remotely access the internet browser operating on the virtual machine and display an interface of the internet browser;
- map a file storage location on the end user device to the internet browser executing in the virtual machine;
- and
- generate a download request for an object in the internet browser on the virtual machine;
- and
- download the object to the file storage location from the internet browser of the virtual machine.
7 more elements
Dependencies are inferred from the claim text.