# US 2021/0176342 A1 · Secure remote workspace

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2021/0176342 A1
- Document ID: US20210176342A1
- Status: Published application
- Kind: A1
- Application number: 16/846,893
- Filed: 2020-04-13
- Published: 2021-06-10
- Earliest claimed: 2019-12-10
- Assignees: Figure Eight Technologies, Inc.
- Applicants: Figure Eight Technologies, Inc.
- Inventors: Wei Pang; Feng Zhu; Brian William Hicks; Michael Ronald Lapinskas; Jiaohong Shi; Mengjie Jiang; Yuheng Cai
- Web page: https://patentgrep.com/patent/US20210176342A1

## CPC

- H04L 67/131: Protocols for games, networked simulations or virtual reality
- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 63/0272: {Virtual private networks}
- H04L 63/0861: {using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231)}
- H04L 63/168: {above the transport layer}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 63/18: {using different networks or channels, e.g. using out of band channels (cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

In an embodiment, process for providing a secure remote workspace includes accessing, via a first client application, a remote desktop application. The process includes activating, within the remote desktop, a second client application to provide access to a task. The process includes obtaining user input in connection with executing the task, and transmitting user input information associated with the execution of the task to a server.

## Claims

### Claim 1

A method comprising:
accessing via a first client application, a remote desktop application;
activating, within the remote desktop, a second client application to provide access to a task;
obtaining user input in connection with executing the task; and
transmitting user input information associated with the execution of the task to a server.

### Claim 2 (depends on 1)

The method of claim 1, wherein the first client application is a secure browser configured to communicate using a secure protocol and the remote desktop application is streamed onto a user terminal.

### Claim 3 (depends on 1)

The method of claim 1, wherein the first client application includes a secure browser configured to access only whitelisted URLs.

### Claim 4 (depends on 1)

The method of claim 1, wherein the first client application includes a secure browser configured to prevent access of blacklisted URLs.

### Claim 5 (depends on 1)

The method of claim 1, wherein the first client application is configured to disable developer tools.

### Claim 6 (depends on 1)

The method of claim 1, wherein the second client application is modified based on a standard browser.

### Claim 7 (depends on 1)

The method of claim 1, wherein the second client application is configured to add a watermark to data output to the user.

### Claim 8 (depends on 7)

The method of claim 7, wherein the watermark includes a visible watermark added as an HTML layer.

### Claim 9 (depends on 7)

The method of claim 7, wherein the watermark includes an obscured watermark added as an HTML layer.

### Claim 10 (depends on 7)

The method of claim 7, wherein the watermark includes an audio watermark.

### Claim 11 (depends on 7)

The method of claim 7, wherein the watermark includes an audio watermark in a frequency range beyond typical human hearing.

### Claim 12 (depends on 1)

The method of claim 1, further comprising recording session information associated with execution of the task.

### Claim 13 (depends on 1)

The method of claim 1, further comprising performing an authentication of the user.

### Claim 14 (depends on 13)

The method of claim 13, wherein the authentication is based on an image of the user.

### Claim 15 (depends on 14)

The method of claim 14, wherein the authentication includes comparing an image of the user with stored user image information.

### Claim 16 (depends on 13)

The method of claim 13, wherein the authentication is based on a video of the user.

### Claim 17 (depends on 16)

The method of claim 16, wherein the authentication includes detecting movement in the video of the user.

### Claim 18 (depends on 1)

The method of claim 1, wherein the task is an annotation task.

### Claim 19

A system comprising:
a processor configured to:
access via a first client application, a remote desktop application;
activate, within the remote desktop, a second client application to provide access to a task;
obtain user input in connection with executing the task; and
transmit user input information associated with the execution of the task to a server; and
a memory coupled to the processor and configured to provide the processor with instructions.

### Claim 20

A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
accessing via a first client application, a remote desktop application;
activating, within the remote desktop, a second client application to provide access to a task;
obtaining user input in connection with executing the task; and
transmitting user input information associated with the execution of the task to a server.
