Virtual Browser Integration for Secure Enterprise Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Enterprise organizations face challenges in controlling and managing access to enterprise information and resources on mobile devices, as mobile devices increasingly access unsupported content and resources, posing security risks.

Innovation Solution

Integrating a virtual browser into a native browser and native web applications, allowing seamless access to natively unsupported content while enhancing security by using a hosted virtual browser application that connects to a virtualization server for authentication and content rendering.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If mobile devices access natively unsupported content and resources, then functionality and adaptability are improved, but security risks increase

Engineering Contradiction:
Improveaccess to unsupported contentVSAvoidsecurity risks
Core Design Contradiction:
Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a virtual browser as an intermediary layer between the native mobile browser and natively unsupported web content. The virtual browser application receives rendering requests from the native browser, processes unsupported content within its controlled environment, and returns rendered output to the native browser. This mediator approach enables access to unsupported content while maintaining security boundaries, as the virtual browser can enforce security policies and isolate potentially harmful content from the native device environment.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If a virtual browser is integrated into a native browser, then access to unsupported content is enabled, but device complexity increases

Engineering Contradiction:
Improveaccess to natively unsupported uniform resource locatorVSAvoidbrowser integration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the browser functionality into distinct components: the native browser handles supported content and user interface interactions, while the virtual browser application handles unsupported content rendering. This segmentation allows each component to specialize in specific tasks, reducing the complexity burden on the native browser while enabling extended functionality. The virtual browser can be independently managed, updated, and configured without affecting the native browser core.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The virtual browser application serves multiple functions: it renders natively unsupported content, enforces security policies, provides a controlled environment for web applications, and interfaces with the native browser through standardized protocols. This multi-functionality consolidates diverse requirements into a single component, reducing overall system complexity compared to implementing multiple separate solutions.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Object-affected harmful factors

If enterprise organizations control access to enterprise information on mobile devices, then security is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvesecurity controlVSAvoiduser accessibility
Core Design Contradiction:
Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The virtual browser acts as a security intermediary that transparently enforces enterprise policies while maintaining seamless user experience. Security controls, authentication mechanisms, and content filtering are implemented within the virtual browser layer, invisible to end users. Users interact with the familiar native browser interface and access enterprise resources without noticing the security layer, thus maintaining ease of operation while achieving strong security control.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The virtual browser application automatically handles security policy enforcement, authentication, and content validation without requiring user intervention. Enterprise security rules are pre-configured and automatically applied to all web content accessed through the virtual browser, eliminating the need for users to manually configure security settings or understand complex security protocols, thereby maintaining ease of operation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3465430B1Virtual browser integration
Publication Date: 2021.09.01 CITRIX SYSTEMS INC
  • EP3465430B1 patent drawingFigure 1
  • EP3465430B1 patent drawingFigure 2
  • EP3465430B1 patent drawingFigure 3

AI summary

Methods, systems, and computer-readable media for integrating a virtual browser into a native browser and native web applications are presented. In some embodiments, a computing device may receive a request to open a first uniform resource locator. Subsequently, the computing device may determine that the first uniform resource locator is natively unsupported. Based on determining that the first uniform resource locator is natively unsupported, the computing device may launch a hosted virtual browser application in a virtual session hosted by a virtualization server. Thereafter, the computing device may receive, from the virtualization server, first hosted browser graphics generated by the hosted virtual browser application, and the first hosted browser graphics generated by the hosted virtual browser application may include content associated with the first uniform resource locator. Then, the computing device may present the first hosted browser graphics generated by the hosted virtual browser application.