Systems and methods for encrypted browser cache

Patent metadata

Field	Value
Publication number	US-12199953-B2
Application number	US-202117540883-A
Country	US
Kind code	B2
Filing date	Dec 2, 2021
Priority date	Nov 7, 2018
Publication date	Jan 14, 2025
Grant date	Jan 14, 2025

Abstract

Embodiments described include systems and methods of an encrypted cache. An embedded browser of a client application executing on a client device may provide access to a network application accessed via the client application. The embedded browser may detect an event at the client device that causes the network application to send or request application data. The embedded browser may access a copy of the application data from encrypted cache of the embedded browser. The encrypted cache may be maintained for the user and store application data for network application(s) accessed by the user. The embedded browser may use the cached application data for establishing or updating a user interface of the network application for display at the client device.

First claim

We claim:

1. A method comprising:
establishing, by the client device, one of a first session and a second session using a browser embedded in a client application of a client device;
encrypting, by the client device, data received from the first session of a user with an application hosted on a remote computing device, the data being stored encrypted in a cache according to the user;
detecting, by the client device, an event on the client device that is to cause the application to use the encrypted data in the second session instead of requesting or sending other application data during the second session; and
using, by the client device responsive to detecting the event, in the second session, a copy of the encrypted data to display a user interface of the application for display at the client device.

2. The method of claim 1 , further comprising encrypting the data for storage in the cache based at least on the application or a user associated with one of the client device or the application.

3. The method of claim 1 , further comprising accessing, by the client device responsive to detecting the event, the copy of the data from the cache.

4. The method of claim 1 , wherein the copy of the data is decrypted from the encrypted data.

5. The method of claim 1 , wherein the event is to cause the client device to request or send the other data during the second session with the application.

6. The method of claim 1 , further comprising using, by the client device, the copy of the data to provide or update the user interface of the application for display at the client device.

7. A system comprising:
a client device having a cache and one or more processors configured to:
establish one of a first session and a second session using a browser embedded in a client application of the client device;
encrypt data received from the first session of a user with an application hosted on a remote computing device, the data being stored encrypted in a cache, the data encrypted according to the user;
detect an event on the client device that is to cause the application to use the encrypted data in the second session instead of requesting or sending other application data during the second session; and
use, responsive to detecting the event, in the second session, a copy of the encrypted data to display a user interface of the application for display at the client device.

8. The system of claim 7 , wherein the client device is further configured to encrypt the data for storage in the cache based at least on the application or a user associated with one of the client device or the application.

9. The system of claim 7 , wherein the client device is further configured to access, responsive to detecting the event, the copy of the data from the cache.

10. The system of claim 7 , wherein the copy of the data is decrypted from the encrypted data.

11. The system of claim 7 , wherein the client device is further configured to use the copy of the data to provide or update the user interface of the application for display at the client device.

12. A non-transitory computer readable medium storing program instructions for causing one or more processors to:
establish one of a first session and a second session using a browser embedded in a client application of a client device;
encrypt data received from the first session of a user with an application hosted on a remote computing device, the data being stored encrypted in a cache, the data encrypted according to the user;
detect an event on the client device that is to cause the application to use the encrypted data in the second session instead of requesting or sending other application data during the second session; and
use, responsive to detecting the event, in the second session, a copy of the encrypted data to display a user interface of the application for display at the client device.

13. The non-transitory computer readable medium of claim 12 , wherein the program instructions further cause the one or more processors to encrypt the data for storage in the cache based at least on the application or a user associated with one of the client device or the application.

14. The non-transitory computer readable medium of claim 12 , wherein the program instructions further cause the one or more processors to access, responsive to detecting the event, the copy of the data from the cache, the copy of the data being decrypted from the encrypted data.

15. The non-transitory computer readable medium of claim 12 , wherein the event is to cause the client device to request or send the other application data during the second session with the application.

16. The non-transitory computer readable medium of claim 12 , wherein the program instructions further cause the one or more processors to use the copy of the data to provide or update the user interface of the application for display at the client device.

Assignees

• Citrix Systems Inc

Inventors

• Fleck Christopher
• Chauhan Abhishek

Classifications

• G06F2212/1052

  Security improvement · CPC title

• G06F12/1408

  by using cryptography (for digital transmission H04L9/00) · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F16/9574 Primary

  of access to content, e.g. by caching · CPC title