Abstract: Systems and methods are disclosed for securely identifying a computing device via a web browser utilizing a customized digital font. In particular, in one or more embodiments, the disclosed systems and methods generate a customized digital font and install the customized digital font on a computing device. Moreover, the disclosed systems and methods utilize the customized digital font to identify the computing device. In particular, one or more embodiments include systems and methods that identify an element of a webpage rendered by the computing device utilizing the customized digital font and identify the client device based on the rendered element of the webpage.

Abstract: Systems and methods are disclosed for recommending shared electronic content via an online service. In some embodiments, a server can identify a first subscriber and a second subscriber to an online service that have access via the online service to an application for using or editing electronic content. The server can also determine a correspondence between usages of the application by the first and second subscribers via the online service with respect to at least one attribute of the application. The server can also identify an electronic content item generated with the application by the first subscriber. The server can also provide, via the online service, a recommendation for the electronic content item to the second subscriber based on the correspondence between the first usage and the second usage with respect to one or more attributes of the application.

Abstract: Systems and methods for identifying a device identifier of a computing device using a browser. A proxy executing on a computing device holds open a connection request from a browser and establishes a secure connection between the proxy and a web server. The proxy sends the first user identifier and the device identifier to a web server. The web server stores the first user identifier and the device identifier as an entry in a cache. The proxy then connects with the browser and establishes a secure connection between the browser and the web server via the proxy. The proxy receives and forwards a second user identifier from the browser to the web server. The web server determines that the second user identifier matches the first user identifier, extracts the associated device identifier, and sends the device identifier to the browser via the proxy.

Abstract: Systems and methods are disclosed for securely identifying a computing device via a web browser utilizing a customized digital font. In particular, in one or more embodiments, the disclosed systems and methods generate a customized digital font and install the customized digital font on a computing device. Moreover, the disclosed systems and methods utilize the customized digital font to identify the computing device. In particular, one or more embodiments include systems and methods that identify an element of a webpage rendered by the computing device utilizing the customized digital font and identify the client device based on the rendered element of the webpage.

Abstract: In various embodiments, methods and systems for managing portable document-based workspaces is provided. An indication to save a document-based workspace for a document is received on a computing device. The computing device can include a software application for editing the document and a client application for communicating with a cloud service component that is configured to store the document and the document-based workspace. Based on receiving the indication to save the document-based workspace, transient data associated with the document is identified. The transient data can be identified based on a data structure that defines document-specific data that are preserved as part of the document-based workspace. The document-based workspace is saved and communicated to the cloud service component such that the transient data associated with the document is accessible when the document is accessed from a second computing device that sends an indication to access the document and the document-based workspace.

Abstract: Systems and methods are disclosed for securely identifying a computing device via a web browser utilizing a customized digital font. In particular, in one or more embodiments, the disclosed systems and methods generate a customized digital font and install the customized digital font on a computing device. Moreover, the disclosed systems and methods utilize the customized digital font to identify the computing device. In particular, one or more embodiments include systems and methods that identify an element of a webpage rendered by the computing device utilizing the customized digital font and identify the client device based on the rendered element of the webpage.

Abstract: Systems and methods for identifying a device identifier of a computing device using a browser. A proxy executing on a computing device holds open a connection request from a browser and establishes a secure connection between the proxy and a web server. The proxy sends the first user identifier and the device identifier to a web server. The web server stores the first user identifier and the device identifier as an entry in a cache. The proxy then connects with the browser and establishes a secure connection between the browser and the web server via the proxy. The proxy receives and forwards a second user identifier from the browser to the web server. The web server determines that the second user identifier matches the first user identifier, extracts the associated device identifier, and sends the device identifier to the browser via the proxy.

Abstract: Detecting an application state using a DNS-controlled proxy is described. In one or more embodiments, a proxy on a computer establishes a first secure connection with a browser and the proxy establishes a second secure connection with a web server. The proxy forwards a request for a test asset from the browser to the web server. In response to the request, the web server responds with the test asset, which is sent via the proxy to the browser. The browser attempts to load the test asset to determine if a desktop application is installed and running on the computer.

Abstract: Systems, methods, and computer-readable storage media are provided for creating and delivering product packaging as a cloud-based service to enterprise administrators. Administrators utilize user credentials to access a web-based portal where a name or identifier of each package created by any enterprise administrator of the organization is presented. Some pre-created packages also may be presented. Utilizing the web-based portal, administrators may create new product packages or update existing product packages. Selected, created, and/or updated product packages are customized based on the user credentials of the accessing/creating administrator. Customized packages are stored in association with a cloud computing infrastructure. When an enterprise administrator wants to deploy a customized product package, the package is downloaded to the administrator's machine from which it may be deployed.

Abstract: Systems and methods are disclosed for securely identifying a computing device via a web browser utilizing a customized digital font. In particular, in one or more embodiments, the disclosed systems and methods generate a customized digital font and install the customized digital font on a computing device. Moreover, the disclosed systems and methods utilize the customized digital font to identify the computing device. In particular, one or more embodiments include systems and methods that identify an element of a webpage rendered by the computing device utilizing the customized digital font and identify the client device based on the rendered element of the webpage.

Abstract: Detecting an application state using a DNS-controlled proxy is described. In one or more embodiments, a proxy on a computer establishes a first secure connection with a browser and the proxy establishes a second secure connection with a web server. The proxy forwards a request for a test asset from the browser to the web server. In response to the request, the web server responds with the test asset, which is sent via the proxy to the browser. The browser attempts to load the test asset to determine if a desktop application is installed and running on the computer.

Abstract: In various embodiments, methods and systems for managing portable document-based workspaces is provided. An indication to save a document-based workspace for a document is received on a computing device. The computing device can include a software application for editing the document and a client application for communicating with a cloud service component that is configured to store the document and the document-based workspace. Based on receiving the indication to save the document-based workspace, transient data associated with the document is identified. The transient data can be identified based on a data structure that defines document-specific data that are preserved as part of the document-based workspace. The document-based workspace is saved and communicated to the cloud service component such that the transient data associated with the document is accessible when the document is accessed from a second computing device that sends an indication to access the document and the document-based workspace.

Abstract: Systems and methods are disclosed for recommending shared electronic content via an online service. In some embodiments, a server can identify a first subscriber and a second subscriber to an online service that have access via the online service to an application for using or editing electronic content. The server can also determine a correspondence between usages of the application by the first and second subscribers via the online service with respect to at least one attribute of the application. The server can also identify an electronic content item generated with the application by the first subscriber. The server can also provide, via the online service, a recommendation for the electronic content item to the second subscriber based on the correspondence between the first usage and the second usage with respect to one or more attributes of the application.

Abstract: In some embodiments, an update server receives an update request for an instance of a client application executed at a computing system. The update request includes context data describing an attribute of the computing system. If an update for the client application modifies a feature of the instance of client application associated with the described attribute, the update server provides the update to the computing system. The update server also receives an update request for an additional instance of the client application executed at another computing system. The additional update request includes context data describing an attribute of the additional computing system. If an available update modifies a feature of the additional instance of the client application that is associated with the described attribute, the update server provides the update to the additional computing system. If not, the update server notifies the additional computing system that no updates are available.

Abstract: A method and apparatus for securely executing a plurality of actions requiring elevated privilege using less than a corresponding plurality of prompts for privilege elevation, and in some embodiments, only a single prompt for privilege elevation, comprising: receiving a request to perform a first action requiring an elevated privilege; acquiring the elevated privilege to perform the first action; executing the first action, wherein the first action is executed based on the elevated privilege; receiving a request to perform a second action requiring an elevated privilege; and executing the second action using the elevated privilege acquired for the first action.

Abstract: A computer implemented method and apparatus for notifying an enterprise administrator of new products and updates. The method comprises displaying one or more software packages on a first device, where each of the one or more software packages is installed on one or more end user devices, each end user device being remote from the first device, and each software package comprising one or more products; indicating each product in the one or more software packages that has on or more new products or one or more new updates available based on information from a software provider of the one or more products; receiving a selection of the one or more software packages for updating; downloading each of the one or more products in each of the one or more selected software package to the first device; and bundling the one or more downloaded products to create a software package for installation on the one or more end user devices.

Abstract: A method, apparatus and computer program product relating to software license tokens is presented. A client system requests launching of a software application and retrieves a first software license token associated with the software application. The client system determines whether the license token associated with the software application is valid, wherein when the license token is valid, the client system launches the software application. When the license token is not valid then the client system requests a replacement license token. The client system receives the replacement license token and stores the replacement license token. The client system then retrieves the stored license token and determines whether the license token is valid. When the license token is valid, then the software application is launched, when the software license token is not valid then the client system refrains from launching of the software application.

Abstract: A method and apparatus for validating the integrity of computer software installer files prior to installation of computer software comprising: generating at least one signature file for at least one corresponding installer file, the at least one signature file comprising a file name, a file size and a checksum, wherein the checksum is calculated for the corresponding installer file; and packaging the at least one signature file with the corresponding installer file, wherein the checksum in the signature file is used to validate the integrity of the installer file prior to installation of the installer file.

Abstract: Methods and systems for using a flexible serialization technique to determine whether certain protected content items (e.g., software) are eligible to be installed on a target computer system during an installation procedure are described. Consistent with some embodiments of the invention, a serial number entered by an end-user is decoded to identify a product identifier that corresponds with a select folder in a folder hierarchy on a storage medium that contains various payloads for installing digital content items on a target computer system. The folder that corresponds with the product identifier includes license configuration information that specifies a set of digital content items eligible for installation, based on the serial number entered by the end-user.

Abstract: A method and apparatus for validating the integrity of computer software installer files prior to installation of computer software comprising: generating at least one signature file for at least one corresponding installer file, the at least one signature file comprising a file name, a file size and a checksum, wherein the checksum is calculated for the corresponding installer file; and packaging the at least one signature file with the corresponding installer file, wherein the checksum in the signature file is used to validate the integrity of the installer file prior to installation of the installer file.