# US 12,192,227 B2 · Secure application for accessing web resources

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,192,227 B2
- Document ID: US12192227B2
- Status: Granted
- Kind: B2
- Application number: 18/100,480
- Filed: 2023-01-23
- Published: 2023-06-01
- Granted: 2025-01-07
- Earliest claimed: 2015-02-20
- Assignees: Authentic8, Inc.
- Applicants: Authentic8, Inc.
- Inventors: Scott M. Petry; Ramesh Rajagopal; Peter K. Lund; Fredric L. Cox; Adam P. Moore; Leslie L. Dunston
- Web page: https://patentgrep.com/patent/US12192227B2

## CPC

- H04L 63/1408: {by monitoring network traffic (monitoring network traffic per se H04L43/00)}
- H04L 63/1433: {Vulnerability analysis}
- G06F 21/53: by executing in a restricted environment, e.g. sandbox or secure virtual machine
- G06F 21/606: {by securing the transmission between two devices or processes}
- H04L 45/306: {Route determination based on the nature of the carried application}
- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload}
- H04L 63/083: {using passwords (cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226)}
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 63/10: {for controlling access to devices or network resources}
- H04L 63/123: {received data contents, e.g. message integrity}
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
- H04L 67/53: using third party service providers
- H04L 67/563: Data redirection of data network streams
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

Embodiments described herein may be directed to systems, methods, apparatuses, devices, computer program products, computer-executable instructions, and/or applications for providing a remote cloud browsing session. An apparatus may receive a request for Internet content from a user device, access the Internet content from an Internet content source, and transmit second Internet content to the user device based on the requested Internet content.

## Claims

### Claim 1

A computing device at a first location through which Internet content is accessed during a remote cloud browsing session, the computing device comprising:
at least one memory comprising instructions; and
at least one processing device configured for executing the instructions, wherein the instructions cause the at least one processing device to perform operations of:
receiving a request for the Internet content from a user device located in a second location different from the first location, wherein the user device executes an Internet application associated with the remote cloud browsing session, and wherein the Internet content is associated with the remote cloud browsing session;
determining the second location associated with the user device;
communicating with an Internet content source to access the Internet content, such that the user device is substantially insulated from communicating directly with the Internet content source or receiving the Internet content directly from the Internet content source;
transmitting second Internet content to the user device, wherein the user device initiates display of, using a graphical processing unit (GPU) comprised in the user device, the second Internet content, or third Internet content based on the second Internet content, to a user of the user device;
logging data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, or the third Internet content, thereby resulting in logged data; and
enabling a remote device application, associated with a remote device located in a remote location different from the first location and the second location, to access the logged data,
wherein access to the logged data enables determination of data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, or the Internet application.

### Claim 2 (depends on 1)

The computing device of claim 1, wherein the instructions cause the at least one processing device to further perform an operation of:
initiating storage of the logged data in a repository.

### Claim 3 (depends on 1)

The computing device of claim 1, wherein the second Internet content includes computing instructions for generating an image representation of at least a portion of the Internet content, wherein the third Internet content comprises the image representation of the at least the portion of the Internet content.

### Claim 4 (depends on 1)

The computing device of claim 1, wherein the instructions cause the at least one processing device to further perform further operations of:
receiving, from the user device located in the second location, a request for the logged data; and
transmitting, to the user device, the logged data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, and an enterprise network associated with the user device.

### Claim 5 (depends on 1)

The computing device of claim 1, wherein the instructions cause the at least one processing device to further perform further operations of:
receiving, from the user device located in the second location, a request to delete the logged data; and
deleting, based on the request to delete the logged data, the logged data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, and an enterprise network associated with the user device.

### Claim 6 (depends on 1)

The computing device of claim 1, wherein the Internet content comprises a first content portion and a second content portion, wherein the first content portion comprises a file portion, and wherein the instructions cause the at least one processing device to further perform further operations of:
identifying, prior to transmitting the second Internet content associated with the remote cloud browsing session to the user device, the first content portion of the Internet content and the second content portion of the Internet content; and
generating the second Internet content based on the second content portion of the Internet content.

### Claim 7 (depends on 1)

The computing device of claim 1, wherein the Internet application executed by the user device comprises at least one of an Internet browser, a mobile application, and a background computing process executed on the user device.

### Claim 8 (depends on 1)

The computing device of claim 1, wherein the instructions cause the at least one processing device to further perform further operations of:
receiving a request for fourth Internet content from a second user device located in a third location different from the first location, wherein the second user device executes a second Internet application associated with the remote cloud browsing session, and wherein the fourth Internet content is associated with the remote cloud browsing session, such that the remote cloud browsing session is associated with more than one user device; and
transmitting fifth Internet content associated with the remote cloud browsing session to the second user device, wherein the second user device initiates display of, using the graphical processing unit (GPU) comprised in the second user device, the fifth Internet content, or sixth Internet content based on the fifth Internet content, to a second user of the second user device.

### Claim 9 (depends on 1)

The computing device of claim 1, wherein the access to the logged data enables the determination of the data associated with the at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, or the Internet application without breaking Internet traffic associated with at least one of the remote cloud browsing session, the user device, or the Internet application.

### Claim 10

A method associated with a remote cloud browsing session executed at a first location, comprising:
receiving, using one or more computing device processors, a request for Internet content from a user device located in a second location different from the first location, wherein the user device executes an Internet application associated with the remote cloud browsing session, and wherein the Internet content is associated with the remote cloud browsing session;
determining, using the one or more computing device processors, the second location associated with the user device;
communicating, using the one or more computing device processors, with an Internet content source to access the Internet content, such that the user device is substantially insulated from communicating directly with the Internet content source or receiving the Internet content directly from the Internet content source;
transmitting, using the one or more computing device processors, second Internet content to the user device, wherein the user device initiates display of, using a graphical processing unit (GPU) comprised in the user device, the second Internet content, or third Internet content based on the second Internet content, to a user of the user device;
logging, using the one or more computing device processors, data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, or the third Internet content, thereby resulting in logged data; and
enabling, using the one or more computing device processors, a remote device application, associated with a remote computing system located in a remote location different from the first location and the second location, to access the logged data,
wherein access to the logged data enables determination of data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, an enterprise network, or the Internet application.

### Claim 11 (depends on 10)

The method of claim 10, wherein the method further comprises:
initiating storage of the logged data in a repository.

### Claim 12 (depends on 10)

The method of claim 10, wherein the second Internet content includes computing instructions for generating the third Internet content, wherein the third Internet content comprises an image representation of at least a portion of the Internet content.

### Claim 13 (depends on 10)

The method of claim 10, wherein the remote device application comprises at least one of a security application, a machine learning application, an analytics application, a trend analysis application, a threat detection or hunting application, and an artificial intelligence application.

### Claim 14 (depends on 10)

The method of claim 10, wherein the remote device application generates, based on the logged data, data for visual display.

### Claim 15 (depends on 10)

The method of claim 10, wherein the access to the logged data enables the determination of the data associated with the at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, the enterprise network, or the Internet application without intercepting live network traffic associated with the remote cloud browsing session.

### Claim 16

A method associated with a remote cloud browsing session executed at a first location, comprising:
receiving, using one or more computing device processors, a request for Internet content from a user device located in a second location different from the first location, wherein the user device executes an Internet application associated with the remote cloud browsing session, and wherein the Internet content is associated with the remote cloud browsing session;
communicating, using the one or more computing device processors, with an Internet content source to access the Internet content, such that the user device is substantially insulated from communicating directly with the Internet content source or receiving the Internet content directly from the Internet content source;
transmitting, using the one or more computing device processors, second Internet content to the user device, wherein the user device initiates display of, using a graphical processing unit (GPU) comprised in the user device, the second Internet content, or third Internet content based on the second Internet content, to a user of the user device;
logging, using the one or more computing device processors, data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, or the third Internet content, thereby resulting in logged data; and
enabling, using the one or more computing device processors, a remote system application, associated with a remote computing system located in a remote location different from the first location and the second location, to access the logged data from a repository,
wherein access to the logged data enables determination of data associated with at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, an enterprise network, or the Internet application.

### Claim 17 (depends on 16)

The method of claim 16, wherein the method further comprises:
initiating storage of the logged data in the repository.

### Claim 18 (depends on 16)

The method of claim 16, wherein the second Internet content includes computing instructions for generating the third Internet content comprising an image representation of at least a portion of the Internet content, or wherein the second Internet content comprises the image representation of the at least the portion of the Internet content.

### Claim 19 (depends on 16)

The method of claim 16, wherein the access to the logged data enables the determination of the data associated with the at least one of the request for the Internet content from the user device located in the second location, the second location associated with the user device, the remote cloud browsing session, the second Internet content, the third Internet content, the user device, the enterprise network, or the Internet application without intercepting or accessing network traffic associated with at least one of the remote cloud browsing session, the user device, the second location, the enterprise network, or the Internet application.

### Claim 20 (depends on 16)

The method of claim 16, further comprising:
identifying, prior to transmitting the second Internet content associated with the remote cloud browsing session to the user device, a first content portion of the Internet content and a second content portion of the Internet content;
generating the second Internet content based on the second content portion of the Internet content;
transmitting a file portion to a second computing device located at a third location for file processing of the file portion,
wherein the file processing comprises determining contents of the file portion;
generating a modified file portion based on the determining the contents of the file portion; and
transmitting the modified file portion to the user device located at the second location.
