Containerizing Web Applications for Managed Execution

• US 20160191645A1
• Filed: 12/30/2014
• Published: 06/30/2016
• Est. Priority Date: 12/30/2014
• Status: Active Application

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Hayton, Richard, Mayers, Chris
• Application Number:
  US14/585,320
• Publication Number:
  US 20160191645A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 8/00 Arrangements for software engineering testing or debugging G06F11/36; administrative, planning or organisation aspects of software project management G06Q10/06
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: G06F 9/4484 Executing subprograms
• CPC Class Codes: G06F 9/455 Emulation; Interpretation; Software simulation, e.g. virtualisation or emulation of application or operating system execution engines
• CPC Class Codes: G06F 9/547 Remote procedure calls [RPC]; Web services
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 67/568 Storing data temporarily at an intermediate stage, e.g. caching
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

Aspects described herein are directed toward systems, methods, devices, and non-transitory computer-readable media for containerizing a web application and managing its execution. In example implementations, at least a portion of a web application a resource list identified by that web application is retrieved. The portion of the web application and the resources retrieved are cached at a computing device. The application manager intercepts one or more function calls invoked at the cached portion of the web application and processes the function calls intercepted.

Claims

1. A method comprising:

retrieving at least a portion of a web application and at least one resource utilized by the web application;

caching, at a computing device, the portion of the web application and the resource retrieved;

intercepting, at an application manager of a client agent residing at the computing device, a function call invoked at the cached portion of the web application; and

processing, at the application manager, the function call intercepted.

2. The method of claim 1, wherein processing the function call intercepted comprises:

invoking functionality of the application manager in lieu of functionality invoked by the function call intercepted at the cached portion of the web application.

3. The method of claim 1, wherein:

the function call intercepted is a network function call configured to invoke remote functionality at a remotely-located computing device; and

processing the network function call comprises applying a network policy to the network function call.

4. The method of claim 3, wherein:

applying the network policy comprises invoking functionality of the application manager in lieu of the remote functionality.

5. The method of claim 3, wherein:

applying the network policy comprises proxying the network function call on behalf of the cached portion of the web application.

6. The method of claim 1, wherein:

the function call intercepted is a storage function call configured to store content at a local data store; and

processing the storage function call comprises applying a storage policy to the storage function call.

7. The method of claim 1, wherein:

the function call intercepted is a hardware function call configured to access local hardware; and

processing the hardware function call comprises applying a hardware policy to the hardware function call.

8. The method of claim 1 further comprising:

modifying, by the client agent, the cached portion of the web application such that at least a portion of its functionality is subject to control by the application manager.

9. The method of claim 8, wherein:

modifying the cached portion of the web application comprises adding to the cached portion of the web application a new function call that invokes functionality of the application manager.

10. The method of claim 8, wherein:

modifying the cached portion of the web application comprises replacing an existing function call in the cached portion of the web application with a replacement function call that invokes functionality of the application manager.

11. The method of claim 8, wherein:

retrieving the portion of the web application and the at least one resource comprises

retrieving a resource list referenced by the web application wherein the resource list identifies on or more resources utilized by the web application, and

retrieving at least one of the resources identified in the resource list; and

modifying the cached portion of the web application comprises removing from the cached portion of the web application a reference to the resource list.

12. The method of claim 1, wherein:

the resource list identifies a remote web service utilized by the web application.

13. The method of claim 12, further comprising:

retrieving, by the client agent, at least a portion of the remote web service;

caching, at the computing device, the portion of the remote web service retrieved; and

modifying the cached portion of the web application to utilize the cached portion of the web service in lieu of the remote web service.

14. A computing device comprising:

one or more processors; and

memory storing instructions that, when executed by at least one of the processors, cause the computing device to

retrieve at least a portion of a web application and at least one resource utilized by the web application,

cache the web application and the resource retrieved,

intercept a function call invoked at the cached portion of the web application; and

process the function call intercepted.

15. The computing device of claim 14, wherein:

when processing the function call intercepted, the instructions, when executed by at least one of the processors, further cause the computing device to invoke functionality of an application manager in lieu of functionality invoked by the function call intercepted at the cached portion of the web application; and

the function call intercepted is one of

i) a network function call configured to initiate a network communication to a remotely-located computing device,

ii) a storage function call configured to store content at a local data store, and

iii) a hardware function call configured to access local hardware.

16. The computing device of claim 14, wherein:

the instructions, when executed by at least one of the processors, further cause the computing device to modify the cached portion of the web application such that at least a portion of its functionality is subject to control by an application manager; and

modification of the cached portion of the web application comprises one or more of

i) addition of a new function call to the cached portion of the web application that invokes functionality of the application manager, and

ii) replacement of an existing function call in the cached portion of the web application with a replacement function call that invokes functionality of the application manager.

17. The computing device of claim 14, wherein:

the resource list identifies a remote web service utilized by the web application; and

the instructions, when executed by at least one of the processors, further cause the computing device to

retrieve at least a portion of the remote web service,

cache the portion of the remote web service retrieved, and

modifying the cached portion of the web application to utilize the cached portion of the web service in lieu of the remote web service.

18. One or more non-transitory computer-readable media storing instructions that, when executed, cause a computing device to:

retrieve at least a portion of a web application and at least one resource utilized by the web application;

cache the web application and the resource retrieved; and

intercept a function call invoked at the cached portion of the web application; and

process the function call intercepted.

19. The non-transitory computer-readable media of claim 18, wherein:

when processing the function call intercepted, the instructions, when executed, further cause the computing device to invoke functionality of an application manager in lieu of functionality invoked by the function call intercepted at the cached portion of the web application; and

the function call intercepted is one of

i) a network function call configured to initiate a network communication to a remotely-located computing device,

ii) a storage function call configured to store content at a local data store, and

iii) a hardware function call configured to access local hardware.

20. The non-transitory computer-readable media of claim 18, wherein:

the resource list identifies a remote web service utilized by the web application; and

the instructions, when executed, further cause the computing device to

retrieve at least a portion of the remote web service,

cache the portion of the remote web service retrieved, and

modifying the cached portion of the web application to utilize the cached portion of the web service in lieu of the remote web service.