Remote browsing session management

摘要

A browsing process is directed to the generation and management of a browse session at a network computing provider. A client computing device transmits secure requests for network resources to a network computing provider. The network computing provider comprises one or more virtual network computing providers for processing secure communications between a client computing device and a content source. A virtual network computing provider handles the secure communications, decrypting and processing the communications while preventing third parties from accessing the unencrypted communication data. The virtual network computing provider may determine a browse configuration identifying processing actions to perform on the request content. The virtual network computing provider may retrieve the requested content, perform a first set of processing actions to generate a processing result, and provide the processing result to the client computing device, which may perform a second set of processing actions, including display.

主权项

1. A system for trusted browsing comprising:
a network computing provider comprising a plurality of physical network computing devices, wherein individual physical network computing devices comprise hardware configurable to execute specific computing instructions, the network computing provider configurable to host one or more virtual network computing providers, each of the one or more virtual network computing providers logically separate from the rest of the network computing provider, wherein at least one of the one or more virtual network computing providers is a private virtual network computing provider under control of a content provider separate from the network computing provider, the private virtual network computing provider configured to:
decrypt a first secure network communication received from a client computing device separate from both the network computing provider and the content provider;communicate with the content provider on behalf of the client computing device by encrypting a second secure network communication for transmission outside of the network computing provider to the content provider, the second secure network communication based at least partly on the first secure network communication; andredirect a subsequent secure network communication from the client computing device to the content provider without decryption by the private virtual network computing provider.