Secure mobile browser for protecting enterprise data

摘要

A system is disclosed that includes components and features for enabling enterprise users to securely access enterprise resources (documents, data, application servers, etc.) using their mobile devices. An enterprise can use some or all components of the system to, for example, securely but flexibly implement a BYOD (bring your own device) policy in which users can run both personal applications and secure enterprise applications on their mobile devices. The system may, for example, implement policies for controlling mobile device accesses to enterprise resources based on device attributes (e.g., what mobile applications are installed), user attributes (e.g., the user's position or department), behavioral attributes, and other criteria. Client-side code installed on the mobile devices may further enhance security by, for example, creating a secure container for locally storing enterprise data, creating a secure execution environment for running enterprise applications, and/or creating secure application tunnels for communicating with the enterprise system.

主权项

1. A mobile device comprising a user interface, a memory, and at least one processor configured to run applications stored on the memory, the mobile device comprising:
a web browser installed on the memory of the mobile device, the web browser configured to regulate operation of at least one application in accordance with one or more enterprise policies, the web browser further comprising a secure cache configured to store data received from one or more enterprise resources, and the web browser further configured to:
determine that a connection speed of a network connection of the mobile device is below a threshold;in response to determining that the connection speed is below the threshold:
prevent the application from detecting that the connection speed is below the threshold; andstore, in the secure cache, data requested to be transmitted over the network connection;after storing data in the secure cache:
receive, from a computing device, an instruction to remove access to data stored in the secure cache; andremove, in response to receiving the instruction, access to the data stored in the secure cache; and an application installed on the memory of the mobile device, the application configured to:
launch the web browser in response to receiving a command to initiate execution; andafter launching the web browser, continue execution within an execution environment provided by the web browser.