Embedded Browser Download Management via Client Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face challenges in managing access to network resources and monitoring potential misuse due to differences in client devices and network resource access methods, particularly when users access web applications and SaaS applications through generic browsers, which lack visibility and control over traffic and data security.
Innovation Solution
A client application with an embedded browser routes network application traffic through itself, providing real-time visibility and control, allowing system administrators to define allowed folders for file downloads and enforce policies that redirect downloads to IT-managed locations, such as cloud or network-hosted folders, ensuring secure and controlled access and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users access network applications through generic browsers, then ease of operation is improved, but visibility and control over traffic and data security deteriorates
Solution Approach 1:
The patent introduces an intermediary component (the client application with embedded browser) that sits between the user's device and network applications. This intermediary captures all traffic, provides visibility, and enforces security policies while maintaining the ease of accessing network applications through a unified interface.
Solution Approach 2:
The client application with embedded browser serves multiple functions: it provides a unified access point for network applications, captures traffic for visibility, enforces security policies, and manages download locations. This multi-functionality resolves the contradiction by consolidating what would otherwise be separate systems into one that maintains ease of operation while providing comprehensive control.
2Ease of operation
If downloads are allowed to any local folder, then ease of operation is improved, but data security and compliance with storage policies deteriorates
Solution Approach 1:
The system performs preliminary action by pre-defining allowed download locations and policies before the download occurs. The client application intercepts download requests and redirects them to approved locations (such as cloud storage or designated network folders) before the files can be saved to unauthorized local positions, thus preventing security risks while maintaining seamless download functionality.
Solution Approach 2:
The system implements feedback mechanisms where the client application monitors download attempts, compares them against defined policies, and provides real-time control. When a download request violates policies (e.g., attempting to save to an unauthorized location), the system intercepts and redirects the download to an approved location, ensuring compliance while preserving user experience.
3Reliability
If traffic is routed through the embedded browser, then visibility and control over data security is improved, but device complexity increases
Solution Approach 1:
The patent merges multiple functions into a single integrated client application: the embedded browser, traffic routing, security policy enforcement, download management, and visibility monitoring are all combined in one application layer. This consolidation provides comprehensive security control while managing complexity by unifying what would otherwise be separate systems into a coordinated whole.
Data Source
AI summary
Embodiments described include systems and methods for managing downloads from an embedded browser. The client application can control the locations to which downloads are directed. A system administrator can configure a policy to restrict downloads to approved locations. The client application can prevent a user from navigating to and downloading a file to a location that has not been approved according to the policy.