Providing a managed browser
View Patent ↗Methods, systems, computer-readable media, and apparatuses for providing a managed browser are presented. In various embodiments, a computing device may load a managed browser. The managed browser may, for instance, be configured to provide a managed mode in which one or more policies are applied to the managed browser, and an unmanaged mode in which such policies might not be applied and/or in which the browser might not be managed by at least one device manager agent running on the computing device. Based on device state information and/or one or more policies, the managed browser may switch between the managed mode and the unmanaged mode, and the managed browser may provide various functionalities, which may include selectively providing access to enterprise resources, based on such state information and/or the one or more policies.
1. A method, comprising:
loading, by a computing device, a managed browser, the managed browser being configured to provide at least one managed mode in which one or more policies are applied to the managed browser, the one or more policies being configured to limit at least one function of the managed browser;
receiving, by the computing device, a request to access one or more enterprise resources via the managed browser;
creating, by the computing device, based on at least one policy of the one or more policies, at least one application tunnel from the managed browser to the one or more enterprise resources, the at least one policy of the one or more policies being configured to selectively limit the managed browser's ability to create the at least one application tunnel; and
obtaining, by the computing device, enterprise data from the one or more enterprise resources via the at least one application tunnel,
wherein creating the at least one application tunnel includes:
creating a first application tunnel from the managed browser to a first enterprise resource; and
creating a second application tunnel from the managed browser to a second enterprise resource, the second enterprise resource being different from the first enterprise resource, and
wherein the first enterprise resource has a first security level and the second enterprise resource has a second security level different from the first security level.
2. The method of claim 1 , wherein the managed browser is configured to provide secure browsing and caching of data obtained from at least one enterprise resource.
3. The method of claim 1 ,
wherein the second security level is higher than the first security level, and
wherein one or more authentication credentials are needed to access the first enterprise resource and at least one additional authentication credential is needed to access the second enterprise resource.
4. The method of claim 1 , wherein at least one policy of the one or more policies is configured to limit usage of the obtained enterprise data.
5. The method of claim 1 , wherein one or more limits imposed by at least one policy of the one or more policies depend on state information that is indicative of a current state of the computing device.
6. A computing device, comprising:
at least one processor; and
memory storing computer-readable instructions that, when executed by the at least one processor, cause the computing device to:
load a managed browser, the managed browser being configured to provide at least one managed mode in which one or more policies are applied to the managed browser, the one or more policies being configured to limit at least one function of the managed browser;
receive a request to access one or more enterprise resources via the managed browser;
create, based on at least one policy of the one or more policies, at least one application tunnel from the managed browser to the one or more enterprise resources, the at least one policy of the one or more policies being configured to selectively limit the managed browser's ability to create the at least one application tunnel; and
obtain enterprise data from the one or more enterprise resources via the at least one application tunnel,
wherein creating the at least one application tunnel includes:
creating a first application tunnel from the managed browser to a first enterprise resource; and
creating a second application tunnel from the managed browser to a second enterprise resource, the second enterprise resource being different from the first enterprise resource, and
wherein the first enterprise resource has a first security level and the second enterprise resource has a second security level different from the first security level.
7. The computing device of claim 6 , wherein the managed browser is configured to provide secure browsing and caching of data obtained from at least one enterprise resource by caching the data obtained from the at least one enterprise resource in at least one encrypted cache.
8. The computing device of claim 6 , wherein the second security level is higher than the first security level, and
wherein one or more authentication credentials are needed to access the first enterprise resource and at least one additional authentication credential is needed to access the second enterprise resource.
9. The computing device of claim 6 , wherein at least one policy of the one or more policies is configured to limit usage of the obtained enterprise data by limiting one or more circumstances in which the obtained enterprise data can be copied and pasted from the managed browser into another application.
10. The computing device of claim 6 , wherein one or more limits imposed by at least one policy of the one or more policies depend on state information that is indicative of a current state of the computing device.
11. One or more non-transitory computer-readable media having instructions stored thereon that, when executed, cause a computing device to:
load a managed browser, the managed browser being configured to provide at least one managed mode in which one or more policies are applied to the managed browser, the one or more policies being configured to limit at least one function of the managed browser;
receive a request to access one or more enterprise resources via the managed browser;
create, based on at least one policy of the one or more policies, at least one application tunnel from the managed browser to the one or more enterprise resources, the at least one policy of the one or more policies being configured to selectively limit the managed browser's ability to create the at least one application tunnel; and
obtain enterprise data from the one or more enterprise resources via the at least one application tunnel,
wherein creating the at least one application tunnel includes:
creating a first application tunnel from the managed browser to a first enterprise resource; and
creating a second application tunnel from the managed browser to a second enterprise resource, the second enterprise resource being different from the first enterprise resource, and
wherein the first enterprise resource has a first security level and the second enterprise resource has a second security level different from the first security level.
12. The one or more non-transitory computer-readable media of claim 11 , wherein the managed browser is configured to provide secure browsing and caching of data obtained from at least one enterprise resource by providing access to the data obtained from the at least one enterprise resource based on validation of one or more authentication credentials and based on compliance with at least one policy of the one or more policies.
13. The one or more non-transitory computer-readable media of claim 11 ,
wherein the second security level is higher than the first security level, and
wherein one or more authentication credentials are needed to access the first enterprise resource and at least one additional authentication credential is needed to access the second enterprise resource.
14. The one or more non-transitory computer-readable media of claim 11 , wherein at least one policy of the one or more policies is configured to limit usage of the obtained enterprise data by limiting one or more circumstances in which the obtained enterprise data can be saved.
15. The method of claim 1 , wherein the at least one policy of the one or more policies is further configured to restrict the managed browser's ability to access at least one type of information using the at least one application tunnel.
16. The method of claim 1 , wherein the at least one policy of the one or more policies is further configured to restrict the managed browser's ability to access specific resources using the at least one application tunnel.
17. The method of claim 1 , wherein the at least one policy of the one or more policies is further configured to restrict the managed browser's ability to create the at least one application tunnel based on one or more of time and location.