Browser extension access based on re-authorization
A policy-based browser system for managing browser extensions used to access functionalities on a web browser in a cloud-based multi-tenant system. The policy-based browser system includes a client device, a web server, and a mid-link server. A set of policies is identified for the installation of a browser extension requested using the client device. The policies specify access to browser extensions at the client device for accessing functionalities associated with the browser extensions. The functionalities are associated with a user application on the client device. The browser extension is analyzed based on usage history for the installation of the browser extension. Non-compliance with one or more policies from the set of policies of the browser extension is flagged for a re-authorization. Based on the re-authorization, either the browser extension is allowed or blocked or partially allowed for the installation and access to the corresponding functionality of the browser extension.
1 . A policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system, the policy-based browser system comprising:
a client device having a local application, the local application is used to access a functionality of a browser extension of a plurality of browser extensions, wherein the browser extension is requested for an installation on the client device;
a web server configured to provide the functionality of the browser extension on a web browser of the client device; and
a mid-link server configured to:
identify a set of policies from a plurality of policies for the installation of the browser extension, wherein:
the plurality of policies specify access to the plurality of browser extensions to be used at the client device for accessing a plurality of functionalities associated with the plurality of browser extensions, and
the plurality of functionalities is associated with a user application on the client device;
analyze the browser extension on usage history for the installation of the browser extension;
check compliance with the set of policies of the browser extension, wherein non-compliance with one or more policies from the set of policies of the browser extension is flagged for a re-authorization; and
based on the re-authorization, either the browser extension is allowed or blocked or partially allowed for the installation and access to the corresponding functionality of the browser extension.
2 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein the re-authorization is performed by an administrator associated with the client device.
3 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein an authorizer of an analyzer of the mid-link server is configured to assign risk scores to each of the plurality of browser extensions based on corresponding categories, compliance with the policies, and the risk score, wherein the re-authorization of the browser extension is based on the corresponding risk score.
4 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein the plurality of policies is based on network traffic, data loss, risks, and/or destination of browser extensions of the client device.
5 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein the browser extension is a plugin.
6 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein the plurality of policies is modified based on the re-authorization.
7 . The policy-based browser system for managing browser extensions used to access functionalities on web browsers in a cloud-based multi-tenant system as recited in claim 1 , wherein the plurality of policies is associated with the installation of the browser extension that is used to establish the functionality or feature using the web browser of the client device.
8 . A method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems, the method comprising:
requesting by a local application running on a client device, access to a functionality on a browser extension of a plurality of browser extensions, wherein the browser extension is requested for an installation on the client device;
identifying by a mid-link server, a set of policies from a plurality of policies for the installation of the browser extension, wherein:
the plurality of policies specify access to the plurality of browser extensions to be used at the client device for accessing a plurality of functionalities associated with the plurality of browser extensions, and
the plurality of functionalities is associated with a user application on the client device;
analyzing the browser extension on usage history for the installation of the browser extension;
checking compliance with the set of policies of the browser extension, wherein non-compliance with one or more policies from the set of policies of the browser extension is flagged for a re-authorization; and
based on the re-authorization, either the browser extension is allowed or blocked or partially allowed for the installation and access to the corresponding functionality of the browser extension.
9 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , wherein the re-authorization is performed by an administrator associated with the client device.
10 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , further comprising assigning risk scores to each of the plurality of browser extensions based on corresponding categories, compliance with the policies, and the risk score, wherein the re-authorization of the browser extension is based on the corresponding risk score.
11 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , wherein the plurality of policies is based on network traffic, data loss, risks, and/or destination of browser extensions of the client device.
12 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , wherein the browser extension is a plugin.
13 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , wherein the plurality of policies is modified based on the re-authorization.
14 . The method for policy-controlled browser extensions for providing secure access to features and functionalities from a browser in cloud-based multi-tenant systems as recited in claim 8 , wherein the plurality of policies is associated with the installation of the browser extension that is used to establish the functionality or feature using a web browser of the client device.
15 . A browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems, the browser controlled system comprising a plurality of servers, collectively having code for:
requesting by a local application running on a client device, access to a functionality on a browser extension of a plurality of browser extensions, wherein the browser extension is requested for an installation on the client device;
identifying by a mid-link server, a set of policies from a plurality of policies for the installation of the browser extension, wherein:
the plurality of policies specify access to the plurality of browser extensions to be used at the client device for accessing a plurality of functionalities associated with the plurality of browser extensions, and
the plurality of functionalities is associated with a user application on the client device;
analyzing the browser extension on usage history for the installation of the browser extension;
checking compliance with the set of policies of the browser extension, wherein non-compliance with one or more policies from the set of policies of the browser extension is flagged for a re-authorization; and
based on the re-authorization, either the browser extension is allowed or blocked or partially allowed for the installation and access to the corresponding functionality of the browser extension.
16 . The browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems as recited in claim 15 , wherein the re-authorization is performed by an administrator associated with the client device.
17 . The browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems as recited in claim 15 , further comprising assigning risk scores to each of the plurality of browser extensions based on corresponding categories, compliance with the policies, and the risk score, wherein the re-authorization of the browser extension is based on the corresponding risk score.
18 . The browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems as recited in claim 15 , wherein the plurality of policies is based on network traffic, data loss, risks, and/or destination of browser extensions of the client device.
19 . The browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems as recited in claim 15 , wherein the browser extension is a plugin.
20 . The browser controlled system for providing access to browser extensions based on policies in cloud-based multi-tenant systems as recited in claim 15 , wherein the plurality of policies is modified based on the re-authorization.