Systems and methods for adding watermarks using an embedded browser

Patent metadata

Field	Value
Publication number	US-11403373-B2
Application number	US-201916403007-A
Country	US
Kind code	B2
Filing date	May 3, 2019
Priority date	May 4, 2018
Publication date	Aug 2, 2022
Grant date	Aug 2, 2022

Abstract

Embodiments described include systems and methods for adding watermarks using an embedded browser. To provide protection to sensitive information from a network application rendered via an embedded browser of a client application, the client application can generate an overlay with a digital watermark, and apply the overlay over the embedded browser. The client application can selectively generate such overlays, and can customize the format of the digital watermark according to the information rendered on the embedded browser. The watermark can remain with any information that is imaged from the embedded browser, and provides a deterrent against misuse of the information via image capture from a computer screen for instance. By adjusting properties (e.g., contrast) of such an image, the watermark can be made visible and detectable, thus allowing such imaging activities and information to be tracked.

First claim

We claim:

1. A method of comprising:
providing, by a client device, access to a network application hosted on a server, via which to acquire information;
selecting, by the client device from a plurality of rules to determine whether to insert a watermark, at least one rule based at least on the network application;
determining, according to the at least one rule, that the watermark is to be inserted to the information acquired via the network application;
inserting, by the client device, responsive to the determining, the watermark to the information acquired via the network application; and
displaying, by the client device, the information from the network application with the watermark.

2. The method of claim 1 , further comprising:
initiating, by the client application, a request to access a network application hosted on a server, and
establishing, by the client device responsive to the request, a secure session to communicate the information of the network application to the client device.

3. The method of claim 1 , wherein selecting the at least one rule comprises: selecting the at least one rule according to at least one of: a type or profile of the network application, a user of the network application, a content or characteristic of the information of the network application, a type or location of the client device, a temporal window associated with accessing the network application, or an environment of a client application on the client device.

4. The method of claim 1 , wherein determining further comprises detecting that image acquisition of the information is being performed or is possible.

5. The method of claim 1 , further comprising identifying, by the client device, the information of the network application accessible via an embedded browser on the client device.

6. The method of claim 1 , further comprising applying the watermark by overlaying the watermark on a portion of at least one of: a user interface of an embedded browser on the client device, a display region of the embedded browser, or the information of the network application.

7. The method of claim 1 , wherein the watermark comprises a hypertext mark-up language (HTML) element or an element of a user interface of an embedded browser on the client device.

8. The method of claim 7 , further comprising setting the HTML element to ignore pointer events from user interaction.

9. The method of claim 1 , further comprising determining a content or format of the watermark according to the information of the network application.

10. The method of claim 1 , further comprising altering an appearance or visibility of the watermark according to a behavior of a user of the client device, or a content or characteristic of the information being displayed or acquired.

11. A system comprising:
a client device having one or more processors coupled with memory, configured to:
provide the client device with access to a network application hosted on a server, via which to acquire information;
select, from a plurality of rules to determine whether to insert a watermark, at least one rule based at least on the network application;
determine, according to the at least one rule, that the watermark is to be inserted to the information acquired via the network application;
insert, responsive to the determination, the watermark to the information acquired via the network application; and
display the information from the network application with the watermark.

12. The system of claim 11 , wherein the client device is further configured to initiate a request to access a network application hosted on a server, and to establish, responsive to the request, a secure session to communicate the information of the network application to the client device.

13. The system of claim 11 , wherein the client device is configured to select the at least one rule according to at least one of: a type or profile of the network application, a user of the network application, a content or characteristic of the information of the network application, a type or location of the client device, a temporal window associated with accessing the network application, or an environment of a client application on the client device.

14. The system of claim 11 , wherein the client device is configured to determine by detecting that image acquisition of the information is being performed or is possible.

15. The system of claim 11 , wherein the client device is configured to identify the information of the network application accessible via an embedded browser on the client device.

16. The system of claim 11 , wherein the client device is configured to apply the watermark by overlaying the watermark on a portion of at least one of: a user interface of an embedded browser on the client device, a display region of the embedded browser, or the information of the network application.

17. The system of claim 11 , wherein the watermark comprises a hypertext mark-up language (HTML) element or an element of a user interface of an embedded browser on the client device.

18. The system of claim 17 , wherein the client device is further configured to set the HTML element to ignore pointer events from user interaction.

19. The system of claim 11 , wherein the client device is further configured to determine a content or format of the watermark according to the information of the network application.

20. The system of claim 11 , wherein the client device is further configured to alter an appearance or visibility of the watermark according to a behavior of a user of the client device, or a content or characteristic of the information being displayed or acquired.

Assignees

• Citrix Systems Inc

Inventors

• Fleck Christopher
• Tobkes Rachelle
• Wilson Stephen

Classifications

• G06T1/0021

  Image watermarking · CPC title

• H04N21/8358

  involving watermark {(protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467)} · CPC title

• H04W12/10

  Integrity · CPC title

• G06F21/16 Primary

  Program or content traceability, e.g. by watermarking · CPC title

• H04L63/20

  for managing network security; network security policies in general (filtering policies H04L63/0227) · CPC title