Configuring browser policy settings on client computing devices

• US 8,347,349 B1
• Filed: 02/08/2012
• Issued: 01/01/2013
• Est. Priority Date: 10/28/2011
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google Inc. (Alphabet Inc.)
• Inventors: Gwalani, Sumit, Masone, Christopher, Wilson, Glenn, Drewry, William A., Nissler, Mattias Stefan, Clifford, Daniel Kenneth
• Primary Examiner(s): HENNING, MATTHEW T
• Application Number:
  US13/369,161
• Time in Patent Office: 328 Days
• Field of Search: 726/1
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Systems and methods for configuring browser policy settings on client computing devices are provided. In some aspects, a method includes receiving login credentials from a client computing device. The client computing device includes a browser. The method also includes transmitting browser policy data associated with the login credentials to the client computing device. The browser policy data identifies browser policy settings to be installed on the browser. The browser policy settings identified by the browser policy data include four or more of: compliance settings, behavioral settings, browser/software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser.

Claims

1. A computer-implemented method for installing browser policy settings on a client computing device, the method comprising:

receiving, at a server, login credentials from a client computing device, wherein the client computing device comprises a browser;

transmitting, in conjunction with a public key of the server, browser policy data associated with the login credentials to the client computing device, wherein the browser policy data identifies browser policy settings to be installed on the browser, wherein the browser policy settings identified by the browser policy data comprise four or more of;

compliance settings, behavioral settings, browser or software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser, and wherein the browser policy data is transmitted for storage, on the client computing device, together with the public key of the server and a signature of the client computing device.

2. The method of claim 1, wherein the login credentials comprise one or more of:

a user name, a password, a certificate, an identifier of the client computing device, or cloud-based or cloud-aware login credentials.

3. The method of claim 1, further comprising:

receiving an update to the browser policy data; and

transmitting an indication of the update to the browser policy data over a network to the client computing device, wherein the update to the browser policy data identifies an update to the browser policy settings to be installed on the browser.

4. The method of claim 3, wherein the network comprises an internet or a cellular network.

5. The method of claim 4, wherein the network comprises an intranet or a virtual private network (VPN).

6. The method of claim 1, wherein the client computing device is associated with an operating system configured to implement the browser.

7. A computer-implemented method for installing browser policy settings on a client computing device, the method comprising:

transmitting login credentials to a server via a browser on a client computing device;

receiving, on the client computing device, browser policy data and a public key from the server in response to the login credentials;

authenticating the browser policy data based on the public key; and

installing browser policy settings based on the authenticated browser policy data on the browser, wherein the browser policy settings based on the browser policy data comprise four or more of;

compliance settings, behavioral settings, browser or software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser, and wherein installing the browser policy settings based on the authenticated browser policy data on the browser comprises storing information based on the browser policy data together with the public key from the server and together with a signature of the client computing device.

8. The method of claim 7, wherein the browser policy settings comprise a device browser policy settings comprising global browser policy settings for one or more users of the client computing device.

9. The method of claim 7, wherein the browser policy settings comprise user browser policy settings comprising browser policy settings for a first user of the client computing device, wherein the first user has permission to access a resource according to the user browser policy settings.

10. The method of claim 9, wherein a second user of the client computing device lacks permission to access the resource according to the user browser policy settings.

11. The method of claim 7, wherein the client computing device is associated with an operating system in a first operating system family, wherein the server is associated with an operating system in a second operating system family different from the first operating system family.

12. The method of claim 7, wherein the server comprises a single server machine, multiple server machines, or a server farm.

13. A computer-readable medium comprising instructions that, when executed by a computer, cause the computer to perform a method for installing browser policy settings on a computer, the method comprising:

transmitting, via a browser on the computer, information identifying an enterprise account associated with a user of the computer to a server;

receiving, on the computer, browser policy data and a public key associated with the server in response to the information identifying the enterprise account;

authenticating the browser policy data based on the public key; and

installing browser policy settings based on the authenticated browser policy data on the browser, wherein the browser policy settings based on the browser policy data comprise four or more of;

compliance settings, behavioral settings, browser or software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser, and wherein installing the browser policy settings based on the authenticated browser policy data on the browser comprises storing information based on the browser policy data together with the public key from the server and together with a signature of the computer.

14. The computer-readable medium of claim 13, wherein the computer is associated with an operating system in a first operating system family, and wherein the server is associated with an operating system in a second operating system family different from the first operating system family.

15. The computer-readable medium of claim 13, wherein the stored information based on the browser policy data, residing on the computer, is configured to be unmovable or uncopyable by a user of the computer attempting to move or copy the stored information to a different computer.

16. The computer-readable medium of claim 13, wherein the stored information based on the browser policy data resides within a module on the computer, wherein the module is secured by both the public key from the server and the signature of the computer, and wherein the module comprises both device policy settings associated with all users of the browser and user policy settings associated with a specific user account of the browser.

17. A system for installing policy settings on a client computing device, the system comprising:

one or more processors; and

a memory comprising instructions that, when executed by the one or more processors, cause the one or more processors to;

receive, at a server, information identifying an enterprise account associated with a user of the client computing device, wherein the client computing device comprises a browser, and

transmit, via a network, in conjunction with a public key of the server, browser policy data associated with the enterprise account associated with the user of the client computing device, wherein the browser policy data identifies browser policy settings to be installed on the browser, wherein the browser policy data identifies browser policy settings to be installed on the browser, wherein the browser policy settings identified by the browser policy data comprise four or more of;

compliance settings, behavioral settings, browser or software applications, permission to access one or more websites, restrictions on accessing one or more websites, read permission in a remote document storage unit accessible via the browser, or write permission in a remote document storage unit accessible via the browser, and wherein the browser policy data is transmitted for storage, on the client computing device, together with the public key of the server and a signature of the client computing device.

18. The system of claim 17, wherein the client computing device is associated with an operating system configured to implement the browser.

19. The system of claim 17, wherein the memory further comprises an operating system in a first operating system family, wherein the client computing device is associated with an operating system in a second operating system family different from the first operating system family.

20. The system of claim 17, wherein the information identifying the enterprise account is associated with a browser of the client computing device.

21. The system of claim 17, wherein the network comprises an internet or a cellular network.