IP Library Granted Patent US 12,488,059
Granted Patent B2
US 12,488,059 · App. 18/461,747 · Granted Dec 2, 2025

Systems and methods for providing multi-tab browser isolation

Inventors: Catalin Dogaru (Valencia, ES); Nicolas Garfinkiel (Palma, ES); Alex-Marian Negrea (Valencia, ES); Daniel Pavel (Valencia, ES); Pritish Patra (Hyderabad, IN); Zhentian Wan (Helsinki, FI); Kripesh Dhakal (Valencia, ES)
Assignee: Zscaler, Inc.
G06F16/957H04L63/14H04L67/025
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,488,059
App. No.
18/461,747
Granted
Dec 2, 2025
Kind
B2
Abstract

Systems and methods include initiating a browser isolation session between a user device and a remote browser, wherein the browser isolation session includes a first isolated browser tab and a second isolated browser tab; providing a connection to the first isolated browser tab; and responsive to a request for switching to the second isolated browser tab, suppressing the connection to the first isolated browser tab; and un-suppressing a connection to the second isolated browser tab.

Claims (39)

1 . A method comprising steps of:

initiating a browser isolation session between a user device and remote browser, wherein the browser isolation session includes a first isolated browser tab and a second isolated browser tab;

providing a connection to the first isolated browser tab; and

responsive to a request for switching to the second isolated browser tab,

transmitting a suppress-all message to a remote display server to suppress output of all isolated browser tabs;

transmitting an un-suppress message identifying the second isolated browser tab to un-suppress output for the second isolated browser tab; and

determining if a connection for the second isolated browser tab exists, and if absent, establishing a connection for the second isolated browser tab while maintaining the session or if present, restoring output for the second isolated browser tab.

2 . The method of claim 1 , wherein the steps include, prior to the initiating, determining if a user of the user device is permitted to access the remote browser.

3 . The method of claim 1 , wherein the suppressing includes suppressing all isolated browser tabs of a plurality of isolated browser tabs.

4 . The method of claim 1 , wherein each of the first and second isolated browser tabs are assigned a control Identification (ID) for distinguishing between the first and second isolated browser tabs, and wherein the un-suppress message includes a control ID corresponding to the second isolated browser tab.

5 . The method of claim 1 , wherein responsive to the request for switching to the second isolated browser tab, the steps include checking if a connection to the second isolated browser tab is present or not.

6 . The method of claim 5 , wherein, responsive to a connection to the second isolated browser tab not being present, creating a connection to the second isolated browser tab.

7 . The method of claim 1 , wherein audio packets associated with the browser isolation session are prevented from being dropped during the suppressing and un-suppressing.

8 . A non-transitory computer-readable medium comprising instructions that, when executed, cause one or more processors to perform the steps of:

initiating a browser isolation session between a user device and remote browser, wherein the browser isolation session includes a first isolated browser tab and a second isolated browser tab;

providing a connection to the first isolated browser tab; and

responsive to a request for switching to the second isolated browser tab,

transmitting a suppress-all message to a remote display server to suppress output of all isolated browser tabs;

transmitting an un-suppress message identifying the second isolated browser tab to un-suppress output for the second isolated browser tab; and

determining if a connection for the second isolated browser tab exists, and if absent, establishing a connection for the second isolated browser tab while maintaining the session or if present, restoring output for the second isolated browser tab.

9 . The non-transitory computer-readable medium of claim 8 , wherein the steps include, prior to the initiating, determining if a user of the user device is permitted to access the remote browser.

10 . The non-transitory computer-readable medium of claim 8 , wherein the suppressing includes suppressing all isolated browser tabs of a plurality of isolated browser tabs.

11 . The non-transitory computer-readable medium of claim 8 , wherein each of the first and second isolated browser tabs are assigned a control Identification (ID) for distinguishing between the first and second isolated browser tabs, and wherein the un-suppress message includes a control ID corresponding to the second isolated browser tab.

12 . The non-transitory computer-readable medium of claim 8 , wherein responsive to the request for switching to the second isolated browser tab, the steps include checking if a connection to the second isolated browser tab is present or not.

13 . The non-transitory computer-readable medium of claim 12 , wherein, responsive to a connection to the second isolated browser tab not being present, creating a connection to the second isolated browser tab.

14 . The non-transitory computer-readable medium of claim 8 , wherein audio packets associated with the browser isolation session are prevented from being dropped during the suppressing and un-suppressing.

15 . A cloud-based system comprising:

one or more hardware-based nodes configured to

initiate a browser isolation session between a user device and remote browser, wherein the browser isolation session includes a first isolated browser tab and a second isolated browser tab;

provide a connection to the first isolated browser tab; and

responsive to a request for switching to the second isolated browser tab,

transmit a suppress-all message to a remote display server to suppress output of all isolated browser tabs;

transmit an un-suppress message identifying the second isolated browser tab to un-suppress output for the second isolated browser tab; and

determining if a connection for the second isolated browser tab exists, and if absent, establishing a connection for the second isolated browser tab while maintaining the session or if present, restoring output for the second isolated browser tab.

16 . The cloud-based system of claim 15 , wherein the one or more nodes are configured to determine if a user of the user device is permitted to access the remote browser prior to initiating the browser isolation session.

17 . The cloud-based system of claim 15 , wherein the one or more nodes are configured to suppress all isolated browser tabs of a plurality of isolated browser tabs.

18 . The cloud-based system of claim 15 , wherein each of the first and second isolated browser tabs are assigned a control Identification (ID) for distinguishing between the first and second isolated browser tabs, and wherein the un-suppress message includes a control ID corresponding to the second isolated browser tab.

19 . The cloud-based system of claim 15 , wherein responsive to the request for switching to the second isolated browser tab, the one or more nodes are configured to check if a connection to the second isolated browser tab is present or not.

20 . The cloud-based system of claim 19 , wherein, responsive to a connection to the second isolated browser tab not being present, the one or more nodes are configured to create a connection to the second isolated browser tab.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 6, 2023
From: DOGARU, CATALIN; GARFINKIEL, NICOLAS; NEGREA, ALEX-MARIAN; PAVEL, DANIEL; PATRA, PRITISH; WAN, ZHENTIAN; DHAKAL, KRIPESH
To: ZSCALER, INC.
Reel/Frame 064812/0765 →
Priority Claims (1)
IN 202311049623 · Jul 24, 2023 · national
Continuity (4)
Continuation In Part 17243836 · Apr 29, 2021
Continuation In Part 16702889 · Dec 4, 2019
Provisional Application 62823220 · Mar 25, 2019
Related Publication 20240111821A1 · Apr 4, 2024
References Cited (21)
US 9128743B1 · Bondalapati · 2015 [cited by examiner]
US 9537885B2 · Giura · 2017 [cited by examiner]
US 20150095838A1 · Rossi · 2015 [cited by examiner]
US 20170078406A1 · Ruge · 2017 [cited by examiner]
US 20190075130A1 · Petry · 2019 [cited by examiner]
US 20210136041A1 · Foxhoven et al. · 2021 [cited by applicant]
US 20210250333A1 · Negrea et al. · 2021 [cited by applicant]
US 20210314301A1 · Chanak et al. · 2021 [cited by applicant]
US 20210336932A1 · Chanak et al. · 2021 [cited by applicant]
US 20210336933A1 · Shah et al. · 2021 [cited by applicant]
US 20210336934A1 · Deshmukh et al. · 2021 [cited by applicant]
US 20210377223A1 · Chanak et al. · 2021 [cited by applicant]
US 20210377303A1 · Bui et al. · 2021 [cited by applicant]
US 20210377304A1 · Ma et al. · 2021 [cited by applicant]
US 20220029965A1 · Chanak et al. · 2022 [cited by applicant]
US 20220329585A1 · Chhabra et al. · 2022 [cited by applicant]
US 20220353244A1 · Kahn et al. · 2022 [cited by applicant]
US 20230015603A1 · Smith · 2023 [cited by applicant]
US 20230019448A1 · Deshmukh et al. · 2023 [cited by applicant]
US 20230275954A1 · Singh · 2023 [cited by examiner]
EP 3716108A1 · 2020 [cited by applicant]