File download methods, devices, computer equipment, readable storage media, and program products

By using remotely isolated secure browser technology to download files on the server side, the problem of insufficient security in browser downloads is solved, enabling more efficient security checks and performance optimization, thereby improving user experience and enterprise security defenses.

CN119484510BActive Publication Date: 2025-12-02CHINA TELECOM CLOUD TECH CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202411670547.2
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2024-11-21
Publication Date
2025-12-02
Estimated Expiration
2044-11-21

AI Technical Summary

Technical Problem

Existing browser technologies have insufficient security during file downloads, especially in terms of the difficulty in detecting malware on local systems, the lag in security software updates, and high resource consumption, which affect the security and performance of user devices.

Method used

It employs Remote Isolation Security Browser (RBI) technology to create an isolated environment for file downloads on the server side. By utilizing an RBI manager, streaming media client, and file storage, it achieves remote isolation throughout the entire file download process, combined with cloud security services for real-time security checks.

Benefits of technology

It effectively isolates user devices from potential security risks, improves the security and performance of file downloads, reduces reliance on local resources, and enhances user experience and enterprise network security.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN119484510B_ABST
    Figure CN119484510B_ABST
Patent Text Reader

Abstract

This application relates to a file download method, apparatus, computer device, computer-readable storage medium, and computer program product. The method includes: receiving a download request sent by an RBI frontend through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading the file corresponding to the file identifier through an RBI streaming media client, and sending a message indicating that the file download is complete to the RBI manager client; uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device; and returning the file link to the RBI frontend, the file link being used by the RBI frontend to download the file. This method improves security.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of browser technology, and in particular to a file download method, apparatus, computer device, computer-readable storage medium, and computer program product. Background Technology

[0002] In today's digital age, the internet has permeated every aspect of people's lives, from work communication and academic research to daily shopping and entertainment. Accessing the internet through browsers has become commonplace. As the bridge connecting users and the internet, the security of browsers plays a crucial role in protecting user information and maintaining cyberspace security.

[0003] In daily use, users often need to download files through their browsers. These files may originate from email attachments, cloud storage sharing, software download sites, and so on. Although these activities seem ordinary, they harbor security risks that cannot be ignored. Malware, including viruses, Trojans, spyware, and adware, often spreads by disguising itself as legitimate files. If users inadvertently download and execute these malicious files, it may lead to the leakage of personal privacy, financial losses, or even corporate security incidents.

[0004] Existing secure browser technologies mostly defend against these threats by performing local security checks, such as scanning downloaded files using integrated or third-party antivirus software. However, these methods have limitations: local security checks are usually performed after the file download is complete, meaning that malware has already entered the user's local system. Even if a threat is detected, there are difficulties in removal and potential residual risks, thus affecting local security. Summary of the Invention

[0005] Therefore, it is necessary to provide a file download method, apparatus, computer device, computer-readable storage medium, and computer program product that can improve security in response to the above-mentioned technical problems.

[0006] Firstly, this application provides a file download method, the method comprising:

[0007] The RBI manager receives download requests sent by the RBI frontend, and the download requests carry an identifier of the file to be downloaded;

[0008] Download the file corresponding to the file identifier to be downloaded using the RBI streaming media client, and send the file download completion information to the RBI manager client;

[0009] The file is uploaded to the file storage via the RBI manager client, and the file link generated by the file storage is obtained;

[0010] The file link is returned to the RBI frontend, and the file link is used by the RBI frontend to download the file.

[0011] In one embodiment, before receiving the download request sent by the RBI frontend, the process includes:

[0012] Receive download process trigger instructions sent by the RBI front end;

[0013] The download process is initiated by calling the RBI manager's initialization interface;

[0014] The RBI manager uses a load balancing strategy to determine the RBI edge server corresponding to the download process trigger command and establishes a connection between the edge server and the RBI front end.

[0015] Web page content is transmitted to the RBI front end via the edge server.

[0016] In one embodiment, before downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client, the method further includes:

[0017] The download request is validated by an RBI streaming media client, and the file size corresponding to the identifier of the file to be downloaded is also validated.

[0018] If the permission verification passes and the file size corresponding to the file identifier to be downloaded is within a preset range, the step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client continues.

[0019] In one embodiment, obtaining the file link generated by the file storage includes:

[0020] The generated file link is returned to the RBI manager via the file storage, wherein the file link is a temporary download link with an expiration date;

[0021] The file link is sent to the message queue via the RBI manager;

[0022] The file link is notified to the RBI streaming media client via the message queue;

[0023] The file link is returned to the RBI frontend via the RBI streaming media client.

[0024] In one embodiment, downloading the file corresponding to the file identifier to be downloaded via an RBI streaming media client includes:

[0025] The download function is initiated within the container using the RBI streaming media client to download the file corresponding to the file identifier to be downloaded.

[0026] In one embodiment, prior to obtaining the file link generated by the file storage, the method further includes:

[0027] The file is subjected to security processing through the file storage.

[0028] Secondly, this application also provides a file downloading device, the device comprising:

[0029] The first receiving module is used to receive download requests sent by the RBI front end through the RBI manager, wherein the download request carries an identifier of the file to be downloaded;

[0030] The download module is used to download the file corresponding to the file identifier to be downloaded through the RBI streaming media client, and send the file download completion information to the RBI manager client;

[0031] The file link generation module is used to upload the file to the file storage via the RBI manager client and obtain the file link generated by the file storage.

[0032] A sending module is used to return the file link to the RBI frontend, and the file link is used by the RBI frontend to download the file.

[0033] Thirdly, this application also provides a computer device, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps of the method in any of the above embodiments.

[0034] Fourthly, this application also provides a computer-readable storage medium having a computer program stored thereon, which, when executed by a processor, implements the steps of the methods in any of the above embodiments.

[0035] Fifthly, this application also provides a computer program product, including a computer program that, when executed by a processor, implements the steps of the method in any of the above embodiments.

[0036] The aforementioned file download method, apparatus, computer equipment, computer-readable storage medium, and computer program product receive a download request sent by an RBI frontend through an RBI manager. The download request carries an identifier for a file to be downloaded. An RBI streaming media client downloads the file corresponding to the identifier and sends a message indicating that the download is complete to the RBI manager client. The RBI manager client uploads the file to a file storage device and obtains a file link generated by the file storage device. The file link is then returned to the RBI frontend, and the file link is used by the RBI frontend to download the file. In this way, the downloaded file is stored in the file storage device, rather than locally on the RBI frontend, effectively isolating potential security risks during user webpage access and file download processes, protecting user devices from malware and network attacks, and improving security. Attached Figure Description

[0037] To more clearly illustrate the technical solutions in the embodiments of this application or related technologies, the drawings used in the description of the embodiments of this application or related technologies will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other related drawings can be obtained based on these drawings without creative effort.

[0038] Figure 1 This is a diagram illustrating the application environment of a file download method in one embodiment.

[0039] Figure 2 This is a flowchart illustrating a file download method in one embodiment;

[0040] Figure 3 This is a timing diagram of a file download method in one embodiment;

[0041] Figure 4 This is a network scenario diagram of a file download method in one embodiment;

[0042] Figure 5 This is a structural block diagram of a file download device in one embodiment;

[0043] Figure 6 This is an internal structural diagram of a computer device in one embodiment. Detailed Implementation

[0044] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0045] Traditional methods of downloading files via a browser rely on local security checks to defend against threats such as malware, for example, by scanning the downloaded file with integrated or third-party antivirus software. However, these methods have limitations:

[0046] 1. Response time: Local security checks are usually performed after the file download is complete, which means that malware has already entered the user's local system. Even if the threat is detected, there is still a certain degree of difficulty in removal and potential residual risks.

[0047] 2. Security vulnerabilities: New types of malware are constantly emerging, while the virus database updates of security software often lag behind the emergence of new threats, which provides opportunities for malware to exploit.

[0048] 3. System resource consumption: Security inspection software usually requires a lot of computing resources, which may affect system performance and user experience on low-configuration devices.

[0049] 4. User dependence: Users rely on the effectiveness of security software and their own security awareness, both of which are often difficult to guarantee.

[0050] To address the aforementioned technical issues, this application provides a file download method based on Remote Isolation Security Browser (RBI) technology. RBI technology creates an isolated browsing environment on the server side, where all user browsing activities, including file downloads, are executed. This means that any potential malware is confined to the remote server and cannot directly access the user's local system. Furthermore, RBI can be combined with cloud security services to provide more timely and comprehensive security checks.

[0051] Therefore, an efficient and reliable download control system for a remotely isolated and secure browser is particularly important. It not only enhances user security during web browsing and reduces the risk of malware intrusion, but also improves the user browsing experience by reducing reliance on local resources. More importantly, for enterprise users, this technology helps build a more robust cybersecurity defense, protecting their information assets from cyber threats.

[0052] In conclusion, the download function control technology of remote isolation security browsers is not only crucial for the network security of individual users, but also of great significance for ensuring the security and stability of the entire network ecosystem.

[0053] Therefore, the file download method in this application can be applied to, for example... Figure 1The application environment shown is as follows. In this environment, the RBI front-end 102 communicates with the back-end 104 via a network. The back-end 104 includes multiple distributed servers, including an RBI manager, an RBI edge server, an RBI streaming media client, a back-end system, an RBI manager client, a storage server, and a message queue.

[0054] In this process, the user accesses a webpage using the RBI frontend 102. The backend 104 receives download requests from the RBI frontend via the RBI manager, and the download requests carry an identifier for the file to be downloaded. The user then downloads the file corresponding to the identifier using the RBI streaming media client and sends a message indicating that the download is complete to the RBI manager client. The user then uploads the file to a file storage device via the RBI manager client and obtains a file link generated by the file storage device. Finally, the user returns the file link to the RBI frontend, which is used by the RBI frontend to download the file. This method of storing downloaded files in the file storage device, rather than on the RBI frontend itself, effectively isolates potential security risks during the user's webpage access and file download process, protects the user's device from malware and cyberattacks, and improves security.

[0055] The RBI front-end 102 can be installed in a terminal, which can be, but is not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, and portable wearable devices. IoT devices can include smart speakers, smart TVs, smart air conditioners, smart in-vehicle devices, and projection devices. Portable wearable devices can include smartwatches, smart bracelets, and head-mounted displays. Head-mounted displays can be virtual reality (VR) devices, augmented reality (AR) devices, and smart glasses. The back-end 104 can be a standalone physical server, a server cluster or distributed system composed of multiple physical servers, or a cloud server providing cloud computing services.

[0056] In one exemplary embodiment, such as Figure 2 As shown, a file download method is provided, which can be applied to... Figure 1 Taking the backend 104 as an example, the explanation includes the following steps 202 to 208. Among them:

[0057] S202: Receive download requests sent by the RBI frontend through the RBI manager. The download requests carry the identifier of the file to be downloaded.

[0058] The RBI edge server transmits web page content to the RBI front end, and users browse web pages through the RBI front end. The RBI edge server is used to ensure that users can browse web page content.

[0059] When a user clicks the download link on the RBI front-end webpage, the download request is sent to the RBI streaming media client corresponding to the RBI edge server.

[0060] S204: Download the file corresponding to the file identifier to be downloaded through the RBI streaming media client, and send the file download completion information to the RBI manager client.

[0061] The RBI streaming media client is used to download the file corresponding to the file identifier to be downloaded. In this way, the file is downloaded on the RBI streaming media client, rather than the RBI front end. By isolating the user's download activity on the server side, even if the file that the user tries to download contains malicious software, it will not pose a direct threat to the user's local computer system.

[0062] After the RBI streaming media client finishes downloading the file, it sends a message indicating that the download is complete to the RBI manager client.

[0063] S206: Upload files to the file storage via the RBI Manager client and obtain the file link generated by the file storage.

[0064] The downloaded file is uploaded to a file storage device via the RBI Manager client. This file storage device can be an S3 storage service. In other embodiments, the file storage device can also be other storage services, and no specific restrictions are imposed here.

[0065] The file storage device can generate corresponding file links to facilitate downloading by the RBI front end.

[0066] Optionally, the download link can be a temporary download link.

[0067] S208: Return the file link to the RBI frontend. The file link is used by the RBI frontend to download the file.

[0068] The file storage returns the file link to the RBI frontend, which then displays the file link, allowing the RBI frontend to download the file via the temporary download link.

[0069] The above file download method involves receiving a download request from the RBI frontend via the RBI manager. This download request carries an identifier for the file to be downloaded. The RBI streaming media client downloads the file corresponding to the identifier and sends a download completion message to the RBI manager client. The RBI manager client then uploads the file to a file storage device and retrieves a file link generated by the file storage device. Finally, the file link is returned to the RBI frontend, which uses this link to download the file. This method stores the downloaded file in the file storage device, rather than on the RBI frontend itself, effectively isolating potential security risks during web page access and file downloads, protecting user devices from malware and cyberattacks, and improving security.

[0070] In one optional embodiment, before receiving the download request sent by the RBI frontend, the process includes: receiving a download process trigger instruction sent by the RBI frontend; invoking the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction through the RBI manager based on a load balancing strategy, and establishing a connection between the edge server and the RBI frontend; and transmitting web page content to the RBI frontend through the edge server.

[0071] This embodiment mainly involves the initiation of the download process. When a user accesses a specific webpage through a browser, the download process is triggered. For example, when a user opens a link through a remotely isolated secure browser, the user's access request is first received by the RBI frontend. The RBI frontend calls the initialization interface of the RBI manager to start the download process. Specifically, it calls the start interface of the RBI manager (rbi-manager) to initialize the download process.

[0072] The RBI Manager selects a suitable RBI edge server (rbi-edge), establishes a connection between the RBI frontend and the RBI edge server, and displays the web page content accessed by the user through the RBI edge server.

[0073] The RBI manager selects a suitable RBI edge server based on the current load and other policies. Specifically, the RBI manager can select the RBI edge server with the lowest load as the edge server for communication with the RBI front end, thereby realizing communication between the RBI front end and the RBI edge server. In other embodiments, other policies, such as priority policies, can also be used, etc., without specific limitations here.

[0074] The selected RBI edge server can transmit web page content to the RBI front end, where users can browse the web page.

[0075] In the above embodiments, by intelligently selecting and deploying RBI edge servers, the performance of user access and download can be optimized according to real-time load and network conditions, thereby improving response speed and stability.

[0076] In one optional embodiment, before downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client, the method further includes: verifying the permission of the download request via the RBI streaming media client, and verifying the size of the file corresponding to the file identifier to be downloaded; if the permission verification passes and the size of the file corresponding to the file identifier to be downloaded is within a preset range, the step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client continues.

[0077] Permission verification refers to whether the RBI frontend has the necessary permissions to download the corresponding file. These permissions can be pre-configured; for example, different roles correspond to different accounts logged into the RBI frontend, and each role has different permissions. Upon receiving a download request from the RBI frontend, permission verification can be performed on the logged-in account. This verification can include: obtaining the permission information corresponding to the account and the permission information corresponding to the file identifier to be downloaded; determining whether the account's permission information includes the permission information corresponding to the file identifier; if so, the RBI frontend passes the permission verification; otherwise, it fails. Optionally, different file types may have different permission information, so permission information can be configured based on file type.

[0078] File size verification checks whether the file size corresponding to the identifier of the file to be downloaded is within the file size range corresponding to the account. If so, the file size verification passes.

[0079] The file size range for this account can be pre-configured, providing enterprises with flexible download control policies, including but not limited to file size limits and file type filtering, to meet the needs of different security levels.

[0080] The permission verification and file size verification can be performed through a corresponding verification system. This verification system can receive the corresponding configuration information and enable the configuration information corresponding to these permission verification and file size verification.

[0081] After receiving a download request, the RBI streaming media client calls the verification system to verify the request, including verifying the user's identity and checking whether they have download permissions. The verification system returns the permission verification result to the RBI streaming media client. If the user does not have download permissions, the RBI streaming media client transmits the error information back to the RBI frontend through the RBI Manager, and the RBI frontend displays the error message to the user. The verification system can be a module in the RBI Manager or a standalone verification system; no specific limitation is made here.

[0082] After successful permission verification, the RBI streaming media client checks the file size. If the file size is outside the preset range, the RBI streaming media client transmits the error information back to the RBI frontend via the RBI Manager, and the RBI frontend displays the error message to the user. If the file size is within the preset range, the RBI streaming media client downloads the file corresponding to the file identifier to be downloaded.

[0083] In some optional embodiments, downloading the file corresponding to the file identifier to be downloaded via an RBI streaming media client includes: initiating the download function within the container via the RBI streaming media client and downloading the file corresponding to the file identifier to be downloaded. This container-based download technology effectively utilizes system resources, improves download speed, optimizes the file transfer process, and reduces network congestion and transmission latency.

[0084] The above embodiments provide enterprises with flexible download control strategies, including but not limited to file size limits and file type filtering, to meet the needs of different security levels. Permission verification and file checks ensure that only authorized users can download files, and limit the size of downloaded files, effectively preventing the negative impact of excessively large files on the system and user experience.

[0085] In one optional embodiment, obtaining the file link generated by the file storage includes: returning the generated file link to the RBI manager via the file storage, wherein the file link is a temporary download link carrying an expiration date; sending the file link to a message queue via the RBI manager; notifying the RBI streaming media client of the file link via the message queue; and returning the file link to the RBI frontend via the RBI streaming media client.

[0086] The file storage system returns the file upload result to the RBI manager client. If the RBI streaming media client successfully uploads the file to the file storage system, the file storage system continues to generate a temporary download link. For example, the file storage system generates a temporary file link with a validity period of three minutes and returns the file link to the RBI manager. In other embodiments, the validity period of the file link can be other times, which are not specifically limited here.

[0087] The RBI manager transmits upload results and temporary download links to the RBI streaming media client via a message queue. For example, the RBI manager sends upload results and temporary download links to a message queue, which then forwards the information to the RBI streaming media client. The RBI streaming media client then transmits the received upload results and download links to the RBI frontend. The RBI frontend displays the corresponding results to the user based on the received information. If the download is successful, the user can download the file via the temporary download link; if it fails, the frontend displays the corresponding error message.

[0088] In the above embodiments, the generation and management of temporary download links allow users to easily obtain and download the files they need without complicated login and authorization processes, simplifying the operation process; the use of message queues optimizes information transmission and collaboration between modules within the system, enabling upload results and download links to be transmitted and processed efficiently, enhancing the manageability and scalability of the system.

[0089] In one alternative embodiment, before obtaining the file link generated by the file storage, the method further includes: performing security processing on the file via the file storage.

[0090] Once a file is uploaded to the file storage service, the service can perform security checks, such as adding a ".tmp" extension to ".exe" files to prevent them from containing viruses. This way, file security verification is handled within the file storage service, rather than the RBI frontend, reducing the load on the frontend.

[0091] Furthermore, different levels of security processing can be adopted for files to meet the requirements of different security levels, and the processing strategies corresponding to different levels can be different.

[0092] The above embodiments enable real-time monitoring of downloading activities, timely interception and handling of potential security threats, thereby providing more proactive security protection. Furthermore, centralized security management and automated security inspection processes reduce enterprises' operational costs for information security.

[0093] For ease of understanding, the following is combined Figure 3 and Figure 4 As shown, where Figure 3 This is a timing diagram of a file download method in one embodiment. Figure 4 This is a network scenario diagram of a file download method in one embodiment. In this embodiment, the user's download activity is isolated in the background to achieve real-time monitoring and control of the download behavior, thereby improving the security of the download activity. The following is a detailed technical solution:

[0094] Initiating the download process: When a user opens a link through a remotely isolated secure browser (RBI frontend), the RBI manager (rbi-manager) calls its start interface to initialize the download process.

[0095] Selecting an RBI Edge Server: The RBI Manager selects a suitable RBI edge server (rbi-edge), establishes a connection between the RBI frontend and the RBI edge server, and displays the web page content accessed by the user through the RBI edge server.

[0096] Download request interception: When a user clicks the download action on a webpage, the RBI streaming client (rbi-streaming-client) intercepts the download request and handles the Browser.downloadWillBegin and Browser.downloadProgress events in ChromeDevToolsProtocol (CDP).

[0097] Download permission verification: The backend checks whether the user has download permission. If download permission is not enabled, an error message is returned and displayed to the user by the RBI frontend.

[0098] File size limit: The backend determines the size of the file to be downloaded. If it exceeds the preset `download_max_size` limit, an error message is returned and displayed to the user by the RBI frontend.

[0099] Initiate in-container download: The RBI streaming client initiates the Chrome download function within the container, downloading the file to the container.

[0100] Download Complete Notification: Once the download is complete, the RBI streaming media client will notify the RBI manager client (rbi-manager-client) via a message queue that the download is finished.

[0101] File Upload to File Storage S3: After the file download is complete, a key value for the File Storage S3 service is generated using a label, and the file is then uploaded to File Storage S3. To prevent downloaded files from containing viruses, the `.exe` file extension is added to `.tmp`.

[0102] Upload Result Processing: The system returns the result of the file being uploaded to file storage S3. If the upload is successful, proceed to the next step; otherwise, proceed to the error handling step.

[0103] Generate a temporary download link: Call the file storage S3 service to generate a temporary download link with a validity period of three minutes.

[0104] Return to Download Link: Returns the generated temporary download link to the RBI Manager.

[0105] File review and virus detection: Review and detect viruses in downloaded files.

[0106] Message queue information transmission: Based on the upload results, return download links, and file review and verification results, transmit the upload file storage S3 results, review and verification information, and temporary download links to the RBI streaming media client via message queue.

[0107] Front-end data transmission: Information is transmitted to the RBI front end through the data channel.

[0108] Front-end display results: Based on the information transmitted in the message queue, the RBI front-end displays the corresponding error message or initiates the download task. In successful cases, the RBI front-end initiates the download of the file from file storage S3 via a temporary download link.

[0109] This application provides a systematic approach to ensure that download activities in remotely isolated secure browsers are adequately controlled and monitored, thereby improving overall network security.

[0110] The above embodiments include at least the following significant effects:

[0111] Enhanced security:

[0112] (1) The introduction of Remote Isolation Security Browser (RBI) effectively isolates potential security risks during the process of users accessing web pages and downloading files, and protects user devices from the effects of malware and network attacks.

[0113] (2) Permission verification and file checking ensure that only authorized users can download files and limit the size of downloaded files, effectively preventing the negative impact of excessively large files on the system and user experience.

[0114] Performance optimization:

[0115] (1) The intelligent selection and deployment of RBI edge servers can optimize the performance of user access and download based on real-time load and network conditions, thereby improving response speed and stability.

[0116] (2) In-container download technology effectively utilizes system resources, improves download speed and optimizes file transfer process, and reduces network congestion and transmission delay.

[0117] User experience improvements:

[0118] (1) The generation and management of temporary download links make it easy for users to obtain and download the files they need without complicated login and authorization processes, thus simplifying the operation process.

[0119] (2) Error handling and feedback mechanism promptly reports download error information, such as insufficient permissions or file size exceeding the limit, which improves user convenience and satisfaction.

[0120] Enhanced management and monitoring functions:

[0121] (1) The use of message queues optimizes the information transmission and collaboration between modules within the system, enabling efficient transmission and processing of upload results and download links, thereby enhancing the manageability and scalability of the system.

[0122] (2) Enhanced auditing and monitoring functions enable administrators to effectively track and monitor the file download and upload process, ensuring the transparency and security of system operations.

[0123] Wide applicability:

[0124] This application is not only applicable to the file download needs of general Internet users, but also to scenarios with specific security requirements, such as enterprise-level and educational institutions, for downloading confidential files and sharing internal files.

[0125] In summary, by introducing Remote Isolation Security Browser (RBI) and related technologies and optimization measures, this invention effectively improves the security, performance, and user experience during the file download process, and has broad application prospects and market competitive advantages.

[0126] It should be understood that although the steps in the flowcharts of the above embodiments are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the above embodiments may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least some of the steps or stages of other steps.

[0127] Based on the same inventive concept, this application also provides a file download apparatus for implementing the file download method described above. The solution provided by this apparatus is similar to the implementation described in the above method; therefore, the specific limitations in one or more file download apparatus embodiments provided below can be found in the limitations of the file download method described above, and will not be repeated here.

[0128] In one exemplary embodiment, such as Figure 5As shown, a file download device is provided, including: a first receiving module 501, a download module 502, a file link generation module 503, and a sending module 504, wherein:

[0129] The first receiving module 501 is used to receive download requests sent by the RBI front end through the RBI manager. The download request carries an identifier of the file to be downloaded.

[0130] Download module 502 is used to download the file corresponding to the file identifier to be downloaded through the RBI streaming media client, and send the file download completion information to the RBI manager client;

[0131] The file link generation module 503 is used to upload files to the file storage via the RBI manager client and obtain the file links generated by the file storage.

[0132] The sending module 504 is used to return a file link to the RBI frontend, which is used by the RBI frontend to download the file.

[0133] In one optional embodiment, the above apparatus further includes: a startup module, configured to receive a download process trigger instruction sent by the RBI front end; call the initialization interface of the RBI manager to start the download process; determine the RBI edge server corresponding to the download process trigger instruction through the RBI manager based on a load balancing strategy, and establish a connection between the edge server and the RBI front end; and transmit web page content to the RBI front end through the edge server.

[0134] In one optional embodiment, the above apparatus further includes: a permission verification module, used to perform permission verification on the download request through the RBI streaming media client, and to verify the file size corresponding to the file identifier to be downloaded; if the permission verification passes and the file size corresponding to the file identifier to be downloaded is within a preset range, the step of downloading the file corresponding to the file identifier to be downloaded through the RBI streaming media client continues.

[0135] In one optional embodiment, the file link generation module 503 is specifically used to return the generated file link to the RBI manager via a file storage device, wherein the file link is a temporary download link with an expiration date; send the file link to a message queue via the RBI manager; notify the RBI streaming media client of the file link via the message queue; and return the file link to the RBI front end via the RBI streaming media client.

[0136] In one optional embodiment, the download module 502 is specifically used to initiate the download function within the container via an RBI streaming media client to download the file corresponding to the file identifier to be downloaded.

[0137] In one alternative embodiment, the apparatus further includes a security processing module for performing security processing on files via a file storage device.

[0138] Each module in the aforementioned file download device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in the processor of a computer device in hardware form or independent of it, or stored in the memory of a computer device in software form, so that the processor can call and execute the operations corresponding to each module.

[0139] In one exemplary embodiment, a computer device is provided, which may be a server, and its internal structure diagram may be as follows: Figure 6 As shown, this computer device includes a processor, memory, input / output interfaces (I / O), and a communication interface. The processor, memory, and I / O interfaces are connected via a system bus, and the communication interface is also connected to the system bus via the I / O interfaces. The processor provides computational and control capabilities. The memory includes non-volatile storage media and internal memory. The non-volatile storage media stores the operating system, computer programs, and databases. The internal memory provides the environment for the operating system and computer programs stored in the non-volatile storage media to run. The I / O interfaces are used for exchanging information between the processor and external devices. The communication interface is used for communicating with an external RBI front-end via a network connection. When executed by the processor, the computer program implements a file download method.

[0140] Those skilled in the art will understand that Figure 6 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the computer device to which the present application is applied. Specific computer devices may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0141] In one exemplary embodiment, a computer device is provided, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to perform the following steps: receiving a download request sent by an RBI frontend through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading the file corresponding to the identifier of the file to be downloaded through an RBI streaming media client, and sending information indicating that the file download is complete to the RBI manager client; uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device; and returning the file link to the RBI frontend, the file link being used by the RBI frontend to download the file.

[0142] In one embodiment, before the processor executes the computer program to receive the download request sent by the RBI front end, the process includes: receiving a download process trigger instruction sent by the RBI front end; invoking the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction through the RBI manager based on a load balancing strategy, and establishing a connection between the edge server and the RBI front end; and transmitting web page content to the RBI front end through the edge server.

[0143] In one embodiment, before the processor executes the computer program to download the file corresponding to the file identifier to be downloaded via the RBI streaming media client, the process further includes: verifying the permission of the download request via the RBI streaming media client, and verifying the size of the file corresponding to the file identifier to be downloaded; if the permission verification is successful and the size of the file corresponding to the file identifier to be downloaded is within a preset range, the process continues to execute the step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client.

[0144] In one embodiment, the acquisition of a file link generated by a file storage device when the processor executes a computer program includes: returning the generated file link to the RBI manager via the file storage device, wherein the file link is a temporary download link carrying an expiration date; sending the file link to a message queue via the RBI manager; notifying the RBI streaming media client of the file link via the message queue; and returning the file link to the RBI frontend via the RBI streaming media client.

[0145] In one embodiment, the process of downloading the file corresponding to the file identifier to be downloaded via an RBI streaming media client when the processor executes a computer program includes: initiating a download function within a container via the RBI streaming media client and downloading the file corresponding to the file identifier to be downloaded.

[0146] In one embodiment, before the processor executes the computer program to obtain the file link generated by the file storage, the method further includes: performing security processing on the file through the file storage.

[0147] In one embodiment, a computer-readable storage medium is provided, on which a computer program is stored. When executed by a processor, the computer program performs the following steps: receiving a download request sent by an RBI frontend through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading the file corresponding to the identifier of the file to be downloaded through an RBI streaming media client, and sending information indicating that the file download is complete to the RBI manager client; uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device; and returning the file link to the RBI frontend, the file link being used by the RBI frontend to download the file.

[0148] In one embodiment, before the computer program is executed by the processor to receive the download request sent by the RBI frontend, it includes: receiving a download process trigger instruction sent by the RBI frontend; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction through the RBI manager based on a load balancing strategy, and establishing a connection between the edge server and the RBI frontend; and transmitting web page content to the RBI frontend through the edge server.

[0149] In one embodiment, before the computer program is executed by the processor to download the file corresponding to the file identifier to be downloaded via the RBI streaming media client, the method further includes: verifying the permission of the download request via the RBI streaming media client, and verifying the size of the file corresponding to the file identifier to be downloaded; if the permission verification is successful and the size of the file corresponding to the file identifier to be downloaded is within a preset range, the step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client continues.

[0150] In one embodiment, the acquisition of a file link generated by a file storage device when the computer program is executed by a processor includes: returning the generated file link to the RBI manager via the file storage device, wherein the file link is a temporary download link carrying an expiration date; sending the file link to a message queue via the RBI manager; notifying the RBI streaming media client of the file link via the message queue; and returning the file link to the RBI frontend via the RBI streaming media client.

[0151] In one embodiment, the downloading of the file corresponding to the file identifier to be downloaded via an RBI streaming media client, implemented by the computer program when executed by the processor, includes: initiating the download function within the container via the RBI streaming media client and downloading the file corresponding to the file identifier to be downloaded.

[0152] In one embodiment, before the computer program is executed by the processor to obtain the file link generated by the file storage, the method further includes: performing security processing on the file through the file storage.

[0153] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, performs the following steps: receiving a download request sent by an RBI frontend through an RBI manager, the download request carrying an identifier of a file to be downloaded; downloading the file corresponding to the identifier of the file to be downloaded through an RBI streaming media client, and sending information indicating that the file download is complete to the RBI manager client; uploading the file to a file storage device through the RBI manager client, and obtaining a file link generated by the file storage device; and returning the file link to the RBI frontend, the file link being used by the RBI frontend to download the file.

[0154] In one embodiment, before the computer program is executed by the processor to receive the download request sent by the RBI frontend, it includes: receiving a download process trigger instruction sent by the RBI frontend; calling the initialization interface of the RBI manager to start the download process; determining the RBI edge server corresponding to the download process trigger instruction through the RBI manager based on a load balancing strategy, and establishing a connection between the edge server and the RBI frontend; and transmitting web page content to the RBI frontend through the edge server.

[0155] In one embodiment, before the computer program is executed by the processor to download the file corresponding to the file identifier to be downloaded via the RBI streaming media client, the method further includes: verifying the permission of the download request via the RBI streaming media client, and verifying the size of the file corresponding to the file identifier to be downloaded; if the permission verification is successful and the size of the file corresponding to the file identifier to be downloaded is within a preset range, the step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client continues.

[0156] In one embodiment, the acquisition of a file link generated by a file storage device when the computer program is executed by a processor includes: returning the generated file link to the RBI manager via the file storage device, wherein the file link is a temporary download link carrying an expiration date; sending the file link to a message queue via the RBI manager; notifying the RBI streaming media client of the file link via the message queue; and returning the file link to the RBI frontend via the RBI streaming media client.

[0157] In one embodiment, the downloading of the file corresponding to the file identifier to be downloaded via an RBI streaming media client, implemented by the computer program when executed by the processor, includes: initiating the download function within the container via the RBI streaming media client and downloading the file corresponding to the file identifier to be downloaded.

[0158] In one embodiment, before the computer program is executed by the processor to obtain the file link generated by the file storage, the method further includes: performing security processing on the file through the file storage.

[0159] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties, and the collection, use and processing of the relevant data must comply with relevant regulations.

[0160] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile memory and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, resistive random access memory (ReRAM), magnetic random access memory (MRAM), ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can take many forms, such as Static Random Access Memory (SRAM) or Dynamic Random Access Memory (DRAM). The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, artificial intelligence (AI) processors, etc., and are not limited to these.

[0161] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this application.

[0162] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A file download method, characterized in that, The method includes: The RBI manager receives download requests sent by the RBI frontend, and the download requests carry an identifier of the file to be downloaded; The download request is validated by the RBI streaming media client, and the file size corresponding to the identifier of the file to be downloaded is also validated. The RBI streaming media client corresponds to the RBI edge server, and the RBI edge server is selected by the RBI manager. If the permission verification is successful and the file size corresponding to the file identifier to be downloaded is within a preset range, the file corresponding to the file identifier to be downloaded is downloaded through the RBI streaming media client, and the information that the file download is complete is sent to the RBI manager client. The file is uploaded to the file storage via the RBI manager client, and the file link generated by the file storage is obtained; The file link is returned to the RBI frontend, and the file link is used by the RBI frontend to download the file.

2. The method according to claim 1, characterized in that, Before receiving the download request sent by the RBI frontend, the following steps are included: Receive download process trigger instructions sent by the RBI front end; The download process is initiated by calling the RBI manager's initialization interface; The RBI manager uses a load balancing strategy to determine the RBI edge server corresponding to the download process trigger command and establishes a connection between the edge server and the RBI front end. Web page content is transmitted to the RBI front end via the edge server.

3. The method according to claim 1, characterized in that, The step of obtaining the file link generated by the file storage includes: The generated file link is returned to the RBI manager via the file storage, wherein the file link is a temporary download link with an expiration date; The file link is sent to the message queue via the RBI manager; The file link is notified to the RBI streaming media client via the message queue; The file link is returned to the RBI frontend via the RBI streaming media client.

4. The method according to any one of claims 1 to 3, characterized in that, The step of downloading the file corresponding to the file identifier to be downloaded via the RBI streaming media client includes: The download function is initiated within the container using the RBI streaming media client to download the file corresponding to the file identifier to be downloaded.

5. The method according to any one of claims 1 to 3, characterized in that, Before obtaining the file link generated by the file storage, the method further includes: The file is subjected to security processing through the file storage.

6. A file download device, characterized in that, The device includes: The first receiving module is used to receive download requests sent by the RBI front end through the RBI manager, wherein the download request carries an identifier of the file to be downloaded; The permission verification module is used to verify the permission of the download request through the RBI streaming media client, and to verify the file size corresponding to the identifier of the file to be downloaded. The RBI streaming media client corresponds to the RBI edge server, and the RBI edge server is selected by the RBI manager. The download module is used to download the file corresponding to the file identifier to be downloaded through the RBI streaming media client when the permission verification is passed and the file size corresponding to the file identifier to be downloaded is within a preset range, and send the file download completion information to the RBI manager client; The file link generation module is used to upload the file to the file storage via the RBI manager client and obtain the file link generated by the file storage. A sending module is used to return the file link to the RBI frontend, and the file link is used by the RBI frontend to download the file.

7. The apparatus according to claim 6, characterized in that, The device further includes: The startup module is used to receive the download process trigger command sent by the RBI frontend; call the initialization interface of the RBI manager to start the download process; determine the RBI edge server corresponding to the download process trigger command through the RBI manager based on the load balancing strategy, and establish a connection between the edge server and the RBI frontend; and transmit web page content to the RBI frontend through the edge server.

8. A computer device comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, When the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 5.

9. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 5.

10. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 5.

Citation Information

Patent Citations

  • Inline file download control in remote browser isolation system

    CN116584086A