Secure cloud computing
AssigneeCitrix Systems, Inc.
InventorsFeng Huang, Andy Cooper
Life of this patent
Estimating the term…
Abstract
Methods and systems for securely using a web application to invoke an application to complete a task are described herein. The application may use identity information provided by the web application to determine whether to comply with requests from the web application. The web application may send the request to the application via a browser. The request may include the origin of the request in an origin header to prevent malicious websites from spoofing the origin of the request. The application may exchange information with a trust service to determine whether the web application domain is trusted and/or belongs to the same organization of the user.
Claims20
A method comprising:
- sending, by a server, identification information to a web browser executing on a client device, the identification information being associated with the client device;
- receiving, by the server, a request for valid domain information from a first application executing on the client device, wherein the request comprises the identification information;
- sending, by the server, the valid domain information to the first application based on a determination that the identification information is signed by a key pair and is valid;
- and
- establishing, based on a determination that a domain name associated with the web browser is valid, a connection with a second application executing on a remote device, wherein the determination is made using the valid domain information.
A system comprising:
- a server and a client device,
- wherein the client device comprises:
- one or more processors and memory, configured to:
- send, by a web browser executing on the client device, a first request for local information to a first application executing on the client device;
- and
- wherein the server comprises:
- one or more processors and memory, configured to:
- receive, from the first application, a second request for valid domain information, wherein the second request comprises identification information corresponding to the web browser;
- and
- send, to the first application, and based on a determination that the identification information is signed by a key pair and is valid, the valid domain information.
An apparatus, comprising one or more processors and memory, configured to:
- receive, by a web browser executing on the apparatus, identification information from a first server, wherein the identification information is associated with the apparatus;
- send, from the web browser, a first request to a first application executing on the apparatus, the first request comprising the identification information and a domain name;
- send, from the first application and to the first server, a second request for valid domain information, wherein the second request comprises the identification information;
- receive, by the first application, and based on a determination that the identification information is signed by a key pair and is valid, the valid domain information;
- and
- based on a determination that the domain name is valid, establish a connection with a second server, wherein the determination is made using the valid domain information.
Dependencies are inferred from the claim text.