SYSTEMS AND METHODS FOR DEPLOYING RICH INTERNET APPLICATIONS IN A SECURE COMPUTING ENVIRONMENT

• US 20140196122A1
• Filed: 03/12/2014
• Published: 07/10/2014
• Est. Priority Date: 03/14/2013
• Status: Active Grant

• Current Assignee: Here Enterprise, Inc.
• Original Assignee: OpenFin, Inc.
• Inventors: Dar, Mazyar Majid, Doerr, Fred Charles
• Granted Patent: US 9,344,420 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46

Abstract

Systems and methods for deploying rich internet applications in a secure computing environment. An example distributed computer system may comprise: a first computer system comprising a run-time environment executing one or more rich internet applications; a second computer system communicatively coupled to the first computer system, the second computer system executing an administration server; wherein the run-time environment is configured to query the administration server to perform at least one of: authenticating a user of the first computer system, determining whether an application is allowed to be executed within the run-time environment, or determining whether an application being executed by the run-time environment is allowed to access a certain function exposed by an application-programming interface (API) of the run-time environment.

Claims

1. A distributed computer system comprising:

a first computer system comprising a run-time environment executing one or more rich internet applications;

a second computer system communicatively coupled to the first computer system, the second computer system executing an administration server;

wherein the run-time environment is configured to query the administration server to perform at least one of;

authenticating a user of the first computer system, determining whether an application is allowed to be executed within the run-time environment, or determining whether an application being executed by the run-time environment is allowed to access a certain function exposed by an application-programming interface (API) of the run-time environment.

2. The distributed computer system of claim 1, wherein the first computer system is provided by a desktop computer.

3. The distributed computer system of claim 1, wherein the run-time environment comprises at least one of:

a user authentication service, an application authorization service, a run-time API permission service, an audit service, a run-time engine, and a client-side inter-application messaging bus.

4. The distributed computer system of claim 3, wherein the user authentication service is configured to authenticate the user by querying the administration server.

5. The distributed computer system of claim 3, wherein the application authorization service is configured to determine, by querying the administration server, whether the application is allowed to be executed within the run-time environment.

6. The distributed computer system of claim 3, wherein the run-time API permission service is configured to determine, by querying the administration server, whether the application is allowed to access a certain function exposed by an API of the run-time environment.

7. The distributed computer system of claim 3, wherein the administration server comprises at least one of:

a user interface or an API for managing permissions for the run-time API permission service.

8. The distributed computer system of claim 3, wherein the administration server comprises at least one of:

a user interface or an API for managing authorizations for the application authorization service.

9. The distributed computer system of claim 1, wherein the audit service is configured to perform at least one of:

capturing audit information associated with user actions, storing the audit information or transmitting the audit information to the administration server.

10. The distributed computer system of claim 1, further comprising a third computer system communicatively coupled to the second computer system, the third computer system comprising the run-time environment for executing rich internet applications.

11. A method, comprising:

providing, by a first computer system, a run-time environment for executing rich internet applications;

responsive to receiving an input by a user selecting a first application residing on a second computer system, querying an administration server to determine whether the first application is allowed to be executed within the run-time environment; and

responsive to determining that the first application is allowed to be executed, downloading the application from the second computer system; and

executing the first application within a first process associated with the run-time environment.

12. The method of claim 11, wherein the first computer system is provided by a desktop computer.

13. The method of claim 11, wherein the first application is provided by a rich internet application.

14. The method of claim 11, further comprising:

authenticating the user by querying the administration server.

15. The method of claim 11, further comprising:

determining, by querying the administration server, whether the user is allowed to cause the first application to be executed within the run-time environment.

16. The method of claim 11, further comprising:

determining, by querying the administration server, whether the first application is allowed to access a certain function exposed by an API of the run-time environment

17. The method of claim 11, further comprising performing at least one of:

capturing audit information associated with user actions, storing audit information or transmitting audit information to the administration server.

18. The method of claim 11, wherein executing the first application further comprises providing an application container for the first application, the application container comprising one or more graphical user interface (GUI) components.

19. The method of claim 11, further comprising:

executing a second application within a second process associated with the run-time environment.

20. The method of claim 19, further comprising:

receiving, by the run-time environment, a message transmitted by the first application; and

delivering the message to the second application.