Systems and methods for consistent enforcement policy across different saas applications via embedded browser

Abstract

Embodiments described include systems and methods for managing sessions to one or more network applications accessed via a client application including an embedded browser. The client application establishes sessions to one or more network applications. The client application identifies a session timeout policy for managing the sessions of the client application. The session timeout policy specifies a time period for which a session is determined to be inactive. The client application monitors activity in the embedded browser for each of the sessions. The client application detects that inactivity of a first session of the sessions has reached the time period of the session timeout policy. The client application detects the inactivity responsive to the monitoring. The client application terminates each of the sessions via the embedded browser responsive to the detection.

We claim: 
     
         1 . A method comprising:
 identifying, by a client device, a time period for a session which is inactive, the session being one of a plurality of sessions which are hosted by different network applications and accessible by the client device;   detecting, by the client device, that inactivity of the session has reached a time out value of the session; and   terminating, by the client device responsive to detection of the inactivity of the session reached the time out value, the plurality of sessions.   
     
     
         2 . The method of  claim 1 , further comprising establishing, by a client application executable by one or more processors of the client device, the plurality of sessions via an embedded browser of the client application. 
     
     
         3 . The method of  claim 1 , further comprising monitoring, by the client device, inactivity for the plurality of sessions the time periods of the plurality of sessions. 
     
     
         4 . The method of  claim 3 , further comprising monitoring, by the client device, keyboard activity for at least one of the plurality of sessions. 
     
     
         5 . The method of  claim 1 , further comprising determining, by the client device, to terminate at least one other session based at least on the time period for the session being reached. 
     
     
         6 . The method of  claim 1 , wherein the different network applications comprise an application hosted on one or more servers accessed by the client device via a network. 
     
     
         7 . A method comprising:
 identifying, by a client device, a time period to be used for a plurality of sessions established by the client device with one or more network applications, the plurality of sessions having a corresponding session timeout, and at least one of the plurality of sessions having a session timeout being less than the time period;   determining, by the client device, that the time period for any of the plurality of sessions has not been reached; and   simulating, by the client device responsive to the determination that the time period for any of the plurality of sessions has not been reached, activity in a session of the plurality of sessions to prevent inactivity of the session from reaching the session timeout of that session.   
     
     
         8 . The method of  claim 7 , further comprising determining, by the client device, that at least another session of the plurality of sessions is active while the session is idle. 
     
     
         9 . The method of  claim 7 , further comprising determining, by the client device, that inactivity in at one of the plurality of sessions has reached the time period and terminating all of the plurality of sessions. 
     
     
         10 . The method of  claim 7 , further comprising monitoring, by the client device, keyboard inactivity in at least one session of the plurality of sessions based at least on the corresponding session timeout for each session. 
     
     
         11 . The method of  claim 7 , further comprising monitoring, by the client device, keyboard inactivity in at least one session of the plurality of sessions based at least on the timeout period for the plurality of sessions. 
     
     
         12 . The method of  claim 7 , further comprising executing for at least one session of the plurality of sessions that is inactive one or more activity simulators in response to any other one of the plurality of sessions has activity. 
     
     
         13 . A device comprising:
 one or more processors, coupled to memory and having a plurality of sessions which are hosted by different network applications and accessible by the device, the one or more processors configured to:   identify a time out value for a session of the plurality sessions which is inactive,   identify a time period to be used for the plurality of sessions for which if any of the plurality of sessions is determined to be inactive the plurality of sessions are terminated;   determine that the time period for any of the plurality of sessions has not been reached; and   simulate responsive to determining that the time period for any of the plurality of sessions has not been reached, activity in the session to prevent inactivity of the session from reaching the time out value of that session.   
     
     
         14 . The device of  claim 13 , wherein the one or more processors are further configured to determine that at least another session of the plurality of sessions is active while the session is idle. 
     
     
         15 . The device of  claim 13 , wherein the one or more processors are further configured to determine that inactivity in each of the plurality of sessions has reached the time period and terminating the plurality of sessions. 
     
     
         16 . The device of  claim 13 , wherein the one or more processors are further configured to monitor keyboard inactivity for the session based at least on the time out value. 
     
     
         17 . The device of  claim 13 , wherein the one or more processors are further configured to monitor inactivity for at least one of the plurality of sessions based at least on the time period for the plurality of sessions. 
     
     
         18 . The device of  claim 13 , wherein the one or more processors are further configured to execute for at least one session of the plurality of sessions that is inactive one or more activity simulators if any other one of the plurality of sessions is active. 
     
     
         19 . The device of  claim 13 , wherein the time out value of the session is less than the time period. 
     
     
         20 . The device of  claim 13 , wherein the different network applications comprise an application hosted on one or more servers accessed by the device via a network.