Architecture for centralized management of browser add-ons across multiple devices

• US 9,785,772 B1
• Filed: 09/30/2014
• Issued: 10/10/2017
• Est. Priority Date: 09/30/2014
• Status: Expired due to Fees

• Current Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Original Assignee: Amazon Technologies, Inc. (Amazon.com, Inc.)
• Inventors: Johansson, Jesper Mikael, Warman, Leon Robert
• Primary Examiner(s): Okeke, Izunna
• Application Number:
  US14/502,644
• Time in Patent Office: 1,106 Days
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements

Abstract

Features are disclosed for facilitating remote management of browser add-ons on multiple user computing devices from a centralized add-on management system. A browser application on the user computing devices may include an integrated application programming interface that can be remotely accessed by the add-on management system. In some embodiments, a management add-on or some other object that is separate from or otherwise not integrated with the browsing application may be used to facilitate the remote management of add-ons. Management of add-ons may include permitting and/or blocking installation and/or execution of particular add-ons on a case-by-case basis. The determination may be based on user permissions, add-on characteristics, observed execution of add-ons, and the like.

Claims

1. A system comprising:

an add-on management system comprising at least one server computing device, the add-on management system configured to manage usage of browser add-ons on user computing devices by at least;

obtaining information from a first user computing device of the user computing devices regarding at least a first browser add-on of the browser add-ons;

obtaining a copy of the first browser add-on based at least partly on the information;

executing the copy of the first browser add-on;

analyzing execution of the copy of the first browser add-on during performance of one or more operations; and

determining that usage of the first browser add-on is to be blocked on at least a second user computing device of the user computing devices based at least partly on the analysis of the execution of the copy of the first browser add-on; and

a browser application that runs on the user computing devices, the browser application configured to provide an application programming interface by which the add-on management system manages usage of the browser add-ons on the user computing devices by, in response to determining that usage of the first browser add-on is to be blocked, instructing the browser application executing on the second user computing device that usage of the first browser add-on is to be blocked;

wherein individual browser add-ons of the browser add-ons comprise an auxiliary executable component, separate from the browser application, that executes at least partly under control of the browser application to add functionality to the browser application.

2. The system of claim 1, wherein individual browser add-ons of the browser add-ons comprise a plug-in, snap-in, extension, toolbar, widget, skin or theme.

3. The system of claim 1, wherein usage of a browser add-on comprises execution of the browser add-on, interaction with the browser add-on, installation of the browser add-on, or retrieval of the browser add-on.

25. The system of claim 1, wherein analyzing execution of the copy of the first browser add-on comprises using a browser API of a browser application to collect performance data about execution of the copy of the first browser add-on in the browser application.

26. The system of claim 1, wherein analyzing execution of the copy of the first browser add-on is performed in response to obtaining the information.

4. Non-transitory computer-readable storage having stored thereon a browser module configured to execute a process on a user computing device, the process comprising:

establishing communications with an add-on management system comprising one or more computing devices separate from the user computing device, wherein the add-on management system is configured to manage usage of browser add-ons on a plurality of user computing devices;

providing a copy of a first browser add-on to the add-on management system;

determining that the first browser add-on is not permitted to be used on the user computing device based at least partly on first information received from the add-on management system; and

determining that a second browser add-on is not permitted to be used on the user computing device based at least partly on second information received from the add-on management system, wherein the second information is based at least partly on an analysis, performed by the add-on management system, of execution of a copy of the second browser add-on during performance of one or more operations, wherein the copy of the second browser add-on is received by the add-on management system from a second user computing device.

5. The non-transitory computer-readable storage of claim 4, wherein the browser module comprises one of:

a browser application with an integrated add-on management application programming interface;

a browser add-on;

or a stand-alone application separate from a browser application.

6. The non-transitory computer-readable storage of claim 4, wherein at least one of the first browser add-on and second browser add-on comprises an auxiliary executable component, separate from a browser application executing on the user computing device, that executes at least partly under control of the browser application to add functionality to the browser application.

7. The non-transitory computer-readable storage of claim 4, wherein at least one of the first browser add-on and second browser add-on comprises a plug-in, snap-in, extension, toolbar, widget, skin or theme.

8. The non-transitory computer-readable storage of claim 4, wherein determining that the first browser add-on is not permitted to be used on the user computing device is further based at least partly on information regarding a user of the user computing device.

9. The non-transitory computer-readable storage of claim 4, wherein determining that the first browser add-on is not permitted to be used on the user computing device is further based at least partly on information regarding an operational characteristic of the first browser add-on.

10. The non-transitory computer-readable storage of claim 4, the process further comprising transmitting a list of browser add-ons installed on the client device to the add-on management system.

11. The non-transitory computer-readable storage of claim 4, wherein the first information comprises a blacklist of add-ons not permitted to be used on the user computing device.

12. The non-transitory computer-readable storage of claim 4, the process further comprising receiving, from the add-on management system, an update to a browser add-on previously installed on the user computing device.

13. A computer-implemented method comprising:

as implemented by an add-on management system comprising one or more computing devices,

establishing communications with a plurality of user computing devices configured to permit remote management, by the add-on management system, of browser add-ons used by the plurality of user computing devices, wherein the plurality of user computing devices are separate from the add-on management system;

obtaining a copy of a browser add-on based at least partly on the browser add-on being used by a first user computing device of the plurality of user computing devices;

executing the copy of the browser add-on;

analyzing execution of the copy of the browser add-on during performance of one or more operations;

determining, based at least partly on analyzing the execution of the copy of the browser add-on, whether the browser add-on is permitted to be used on at least a second user computing device of the plurality of user computing devices; and

instructing the second user computing device regarding usage of the browser add-on.

14. The computer-implemented method of claim 13, wherein the browser add-on comprises a plug-in, snap-in, extension, toolbar, widget, skin or theme.

15. The computer-implemented method of claim 13, wherein executing the copy of the browser add-on comprises executing the browser add-on in a sandbox.

16. The computer-implemented method of claim 13, wherein the copy of the browser add-on is obtained from an add-on server or a user computing device of the plurality of user computing devices.

17. The computer-implemented method of claim 16, wherein the copy of the browser add-on is obtained from an approved add-on server, and wherein the approved add-on server is different than an add-on server from which the first user computing device obtained the browser add-on.

18. The computer-implemented method of claim 13, further comprising maintaining a repository of trusted browser add-ons, wherein individual browser add-ons are included in the repository based at least partly on information regarding the individual browser add-ons received from at least a portion of the plurality of user computing devices.

19. The computer-implemented method of claim 13, wherein determining whether the browser add-on is permitted to be used on the second user computing device comprises determining to block usage of the browser add-on based at least partly on information regarding an operational characteristic of the browser add-on.

20. The computer-implemented method of claim 13, wherein determining whether the browser add-on is permitted to be used on the second user computing device comprises determining to block usage of the browser add-on on second user computing device based at least partly on information regarding a user of the second user computing device.

21. The computer-implemented method of claim 13, wherein instructing the second user computing device regarding usage of the browser add-on comprises providing approval to use the add-on.

22. The computer-implemented method of claim 13, wherein instructing the second user computing device regarding usage of the browser add-on comprises instructing the second user computing device to use an alternative add-on.

23. The computer-implemented method of claim 22, wherein determining whether the browser add-on is permitted to be used comprises identifying the alternative add-on using information regarding the browser add-on and a cross-reference list.

24. The computer-implemented method of claim 13, further comprising:

obtaining an inventory of browser add-ons installed on the first user computing device of the plurality of user computing devices, wherein the first user computing device has been disconnected from an enterprise network for a period of time; and

determining, based at least partly on the inventory, whether to permit the first user computing device to use the enterprise network.

27. The computer-implemented method of claim 13, wherein instructing the second user computing device regarding usage of the browser add-on is performed without receiving a request from the second user computing device regarding the browser add-on.