IP Library Granted Patent US 9,667,411
Granted Patent B2
US 9,667,411 · App. 14/742,811 · Granted May 30, 2017

Media support in secure mobile applications

Inventor: Krishna Kumar (Bangalore, IN)
Assignee: Citrix Systems, Inc.
H04L9/08H04L63/10H04L67/02H04L67/10
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,667,411
App. No.
14/742,811
Filed
Jun 18, 2015
Granted
May 30, 2017
Kind
B2
Art Unit
2434
USPC
713/168
Abstract

Methods, systems, computer-readable media, and apparatuses for providing secure resources to a native operating system resource are described herein. Using one or more aspects described herein, a mobile device may determine that a native operating system service requests to access content located within a wrapped application. The mobile device may transmit, to the native operating system service, a server path to a loopback web server within the wrapped application to elicit a request from the native operating system service to the loopback web server for the content. In response to receiving a request comprising the server path to the loopback web server to retrieve the content from the loopback web server, the mobile device may instruct the loopback web server to transmit an unencrypted version of the content to the native operating system service.

Claims (61)

1. A method, comprising:

determining, by a processor of a mobile device, that a wrapped application requests to play encrypted media content using a native media player application, wherein the wrapped application is subject to control by an enterprise management system that restricts data transmission to and from the wrapped application based on a set of one or more policy files stored on the mobile device independent of the wrapped application;

transmitting, by the processor and to the native media player application, a server path to a loopback web server within the wrapped application to elicit a request from the native media player application to the loopback web server for the media content;

receiving, by the processor and from the native media player application, a request to retrieve the media content from the loopback web server; and

responsive to determining that the request to retrieve the media content comprises the server path, sending the request to the loopback web server requesting the loopback web server to transmit an unencrypted version of the media content to the native media player.

2. The method of claim 1 , further comprising:

generating, by the processor, the loopback web server within the wrapped application; and

generating, by the processor, the server path associated with the media content, wherein the loopback web server is instructed to retrieve the media content from a file path at which the media content is located within the wrapped application based on the server path.

3. The method of claim 1 , further comprising:

identifying, by the processor, a file path at which the media content is located within the wrapped application; and

responsive to determining that the wrapped application requests to play the media content using the native media player application, generating the server path for transmission to the native media player application, wherein the server path is uniquely associated with the file path at which the media content is located within the wrapped application.

4. The method of claim 1 , wherein the server path is identified using a security token, the method further comprising:

determining, by the processor, whether the request from the media player application to retrieve the media content comprises the security token; and

instructing, based on the security token, the loopback web server to decrypt the media content associated with the server path for transmission to the media player application.

5. The method of claim 4 , wherein the security token comprises one of a randomized identifier and encrypted data.

6. The method of claim 1 , further comprising restricting access to the loopback web server and the server path to applications and processes executing on the mobile device.

7. The method of claim 1 , further comprising:

responsive to receiving the request from the native media player application, identifying by the loopback web server a file path of the media content, wherein said identifying comprises querying a mapping of associations between server paths and file paths of a plurality of different media content;

retrieving the media content located at the associated file path; and

instructing the loopback web server to generate the unencrypted version of the media content from the media content located at the identified file path for transmission to the native media player application.

8. One or more non-transitory computer readable storage media comprising computer readable instructions that, when executed, cause a device to perform:

determining, by a processor of the device, that a wrapped application requests to play encrypted media content using a native media player application, wherein the wrapped application is subject to control by an enterprise management system that restricts data transmission to and from the wrapped application based on a set of one or more policy files stored on the mobile device independent of the wrapped application;

transmitting, by the processor and to the native media player application, a server path to a loopback web server within the wrapped application to elicit a request from the native media player application to the loopback web server for the media content;

receiving, by the processor and from the native media player application, a request to retrieve the media content from the loopback web server; and

responsive to determining that the request to retrieve the media content comprises the server path, sending the request to the loopback web server requesting the loopback web server to transmit an unencrypted version of the media content to the native media player.

9. The computer readable storage media of claim 8 , wherein the computer readable instructions further cause the device to perform:

generating, by the processor, the loopback web server within the wrapped application; and

generating, by the processor, the server path associated with the media content, wherein the loopback web server is instructed to retrieve the media content from a file path at which the media content is located within the wrapped application based on the server path.

10. The computer readable storage media of claim 8 , wherein the computer readable instructions further cause the device to perform:

identifying, by the processor, a file path at which the media content is located within the wrapped application; and

responsive to determining that the wrapped application requests to play the media content using the native media player application, generating the server path for transmission to the native media player application, wherein the server path is uniquely associated with the file path at which the media content is located within the wrapped application.

11. The computer readable storage media of claim 8 , wherein the server path is identified using a security token, and wherein the computer readable instructions further cause the device to perform:

determining, by the processor, whether the request from the media player application to retrieve the media content comprises the security token; and

instructing, based on the security token, the loopback web server to decrypt the media content associated with the server path for transmission to the media player application.

12. The computer readable storage media of claim 11 , wherein the security token comprises one of a randomized identifier and encrypted data.

13. The computer readable storage media of claim 8 , wherein the computer readable instructions further cause the device to perform restricting access to the loopback web server and the server path to applications and processes executing on the mobile device.

14. The computer readable storage media of claim 8 , wherein the computer readable instructions further cause the device to perform:

responsive to receiving the request from the native media player application, identifying by the loopback web server a file path of the media content, wherein said identifying comprises querying a mapping of associations between server paths and file paths of a plurality of different media content;

retrieving the media content located at the associated file path; and

instructing the loopback web server to generate the unencrypted version of the media content from the media content located at the identified file path for transmission to the native media player application.

15. A system comprising:

a processor; and

memory storing computer readable instructions that, when executed, cause the system to perform:

determining, by the processor, that a wrapped application requests to play encrypted media content using a native media player application, wherein the wrapped application is subject to control by an enterprise management system that restricts data transmission to and from the wrapped application based on a set of one or more policy files stored on the mobile device independent of the wrapped application;

transmitting, by the processor and to the native media player application, a server path to a loopback web server within the wrapped application to elicit a request from the native media player application to the loopback web server for the media content;

receiving, by the processor and from the native media player application, a request to retrieve the media content from the loopback web server; and

responsive to determining that the request to retrieve the media content comprises the server path, sending the request to the loopback web server requesting the loopback web server to transmit an unencrypted version of the media content to the native media player.

16. The system of claim 15 , wherein the computer readable instructions further cause the system to perform:

generating, by the processor, the loopback web server within the wrapped application; and

generating, by the processor, the server path associated with the media content, wherein the loopback web server is instructed to retrieve the media content from a file path at which the media content is located within the wrapped application based on the server path.

17. The system of claim 15 , wherein the computer readable instructions further cause the system to perform:

identifying, by the processor, a file path at which the media content is located within the wrapped application; and

responsive to determining that the wrapped application requests to play the media content using the native media player application, generating the server path for transmission to the native media player application, wherein the server path is uniquely associated with the file path at which the media content is located within the wrapped application.

18. The system of claim 15 , wherein the server path is identified using a security token, and wherein the computer readable instructions further cause the system to perform:

determining, by the processor, whether the request from the media player application to retrieve the media content comprises the security token; and

instructing, based on the security token, the loopback web server to decrypt the media content associated with the server path for transmission to the media player application.

19. The system of claim 15 , wherein the computer readable instructions further cause the system to perform restricting access to the loopback web server and the server path to applications and processes executing on the mobile device.

20. The system of claim 15 , wherein the computer readable instructions further cause the system to perform:

responsive to receiving the request from the native media player application, identifying by the loopback web server a file path of the media content, wherein said identifying comprises querying a mapping of associations between server paths and file paths of a plurality of different media content;

retrieving the media content located at the associated file path; and

instructing the loopback web server to generate the unencrypted version of the media content from the media content located at the identified file path for transmission to the native media player application.

Assignments (9)
PATENT SECURITY AGREEMENT Recorded Aug 15, 2025
From: CLOUD SOFTWARE GROUP, INC.; CITRIX SYSTEMS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS NOTES COLLATERAL AGENT
Reel/Frame 072488/0172 →
SECURITY INTEREST Recorded May 24, 2024
From: CLOUD SOFTWARE GROUP, INC. (F/K/A TIBCO SOFTWARE INC.); CITRIX SYSTEMS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS NOTES COLLATERAL AGENT
Reel/Frame 067662/0568 →
PATENT SECURITY AGREEMENT Recorded Apr 14, 2023
From: CLOUD SOFTWARE GROUP, INC. (F/K/A TIBCO SOFTWARE INC.); CITRIX SYSTEMS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS NOTES COLLATERAL AGENT
Reel/Frame 063340/0164 →
RELEASE AND REASSIGNMENT OF SECURITY INTEREST IN PATENT (REEL/FRAME 062113/0001) Recorded Apr 14, 2023
From: GOLDMAN SACHS BANK USA, AS COLLATERAL AGENT
To: CITRIX SYSTEMS, INC.; CLOUD SOFTWARE GROUP, INC. (F/K/A TIBCO SOFTWARE INC.)
Reel/Frame 063339/0525 →
PATENT SECURITY AGREEMENT Recorded Oct 7, 2022
From: TIBCO SOFTWARE INC.; CITRIX SYSTEMS, INC.
To: BANK OF AMERICA, N.A., AS COLLATERAL AGENT
Reel/Frame 062112/0262 →
PATENT SECURITY AGREEMENT Recorded Oct 7, 2022
From: TIBCO SOFTWARE INC.; CITRIX SYSTEMS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION, AS NOTES COLLATERAL AGENT
Reel/Frame 062113/0470 →
SECOND LIEN PATENT SECURITY AGREEMENT Recorded Oct 7, 2022
From: TIBCO SOFTWARE INC.; CITRIX SYSTEMS, INC.
To: GOLDMAN SACHS BANK USA, AS COLLATERAL AGENT
Reel/Frame 062113/0001 →
SECURITY INTEREST Recorded Sep 30, 2022
From: CITRIX SYSTEMS, INC.
To: WILMINGTON TRUST, NATIONAL ASSOCIATION
Reel/Frame 062079/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 19, 2015
From: KUMAR, KRISHNA
To: CITRIX SYSTEMS, INC.
Reel/Frame 035864/0610 →
Continuity (1)
Related Publication 20160373251A1 · Dec 22, 2016