Systems and methods for managing downloads from an embedded browser

Patent metadata

Field	Value
Publication number	US-11388258-B2
Application number	US-202017113720-A
Country	US
Kind code	B2
Filing date	Dec 7, 2020
Priority date	Nov 6, 2018
Publication date	Jul 12, 2022
Grant date	Jul 12, 2022

Abstract

Embodiments described include systems and methods for managing downloads from an embedded browser. The client application can control the locations to which downloads are directed. A system administrator can configure a policy to restrict downloads to approved locations. The client application can prevent a user from navigating to and downloading a file to a location that has not been approved according to the policy.

First claim

I claim:

1. A method, comprising:
identifying, by a client device, one or more locations of a computing environment in which to download files from a network application based at least on identification of the network application;
detecting, by the client device, a request to download a file from the network application; and
causing, by the client device, the file to be downloaded only to the one or more locations of the computing environment identified for the network application in response to detection of the request.

2. The method of claim 1 , further comprising accessing, by the client device, the network application via an embedded browser.

3. The method of claim 1 , further comprising receiving, by the client device, identification of the one or more locations for the network application from a server.

4. The method of claim 1 , wherein the client device is operated by a first entity different than a second entity operating the network application.

5. The method of claim 1 , further comprising providing, by the client device, a user interface to select download locations, the download locations being the one or more locations for the network application.

6. A client device, comprising:
one or more processors, coupled to memory and configured to:
identify one or more locations of a computing environment in which to download files from a network application based at least on identification of the network application;
detect a request to download a file from the network application; and
cause the file to be downloaded only to the one or more locations of the computing environment identified for the network application in response to detection of the request.

7. The client device of claim 6 , wherein the one or more processors are further configured to access the network application via an embedded browser.

8. The client device of claim 6 , wherein the one or more processors are further configured to receive identification of the one or more locations for the network application from a server.

9. The client device of claim 6 , wherein the client device is operated by a first entity different than a second entity operating the network application.

10. The client device of claim 6 , wherein the one or more processors are further configured to provide a user interface to select download locations, the download locations being the one or more locations for the network application.

11. A system comprising:
a client device of a first entity configured to:
identify for a network application of a second entity accessed via the client device of the first entity at least one location, based at least on identification of the network application, to which to enforce downloading of a file from the network application of the second entity;
determine that the network application is initiating a download of a file via the client device; and
enforce the file to be downloaded to at least one location identified for that network application.

12. The system of claim 11 , wherein the client device is further configured to access the network application via an embedded browser.

13. The system of claim 11 , wherein the client device is further configured to obtain identification of the at least one location for the network application from a server of the first entity.

14. The system of claim 11 , wherein the client device is configured to obtain identification of the at least one location for the network application based at least on a user of the client device.

15. The system of claim 11 , wherein the client device is further configured to detect a selection via a user interface of the network application to request a download of the file.

16. The system of claim 11 , wherein the at least one location comprises a location in a local drive, a network hosted folder or a cloud based folder.

17. The system of claim 11 , wherein the client device is further configured to cause a drive access service to display only the at least one location as a destination to download the file.

Assignees

• Citrix Systems Inc

Inventors

• Fleck Christopher

Classifications

• H04L67/06

  specially adapted for file transfer, e.g. file transfer protocol [FTP] · CPC title

• H04L67/34 Primary

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title

• H04L67/02 Primary

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• G06F12/14

  Protection against unauthorised use of memory {or access to memory} · CPC title

• H04L67/01

  Protocols · CPC title