On-demand security policy activation

• US 10,116,662 B2
• Filed: 09/25/2017
• Issued: 10/30/2018
• Est. Priority Date: 04/12/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich, Brannon, Jonathan Blake
• Primary Examiner(s): Getachew, Abiy
• Application Number:
  US15/714,032
• Publication Number:
  US 20180026988A1
• Time in Patent Office: 400 Days
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

On-demand activation of a security policy may be provided. Upon receiving a selection of a link, a profile identified by a security policy associated with the link may be activated and the link may be opened according to the security policy. In some embodiments, opening the link according to the security policy may comprise redirecting the opening of the link from a first application to a second application.

Claims

1. A method comprising:

receiving, using a first application at a mobile computing device, a user selection of a resource locator, wherein the resource locator comprises a reference to a resource;

determining, using the mobile computing device, whether the selected resource locator is associated with a security policy; and

in response to determining that the resource locator is associated with the security policy;

activating, in the mobile computing device, a profile identified by the security policy, wherein the profile allows access to the resource, referred to by the resource locator and selected using the first application, if the mobile computing device is connected to a Virtual Private Network (VPN) connection;

launching, at the mobile computing device, the VPN connection; and

accessing the resource referred to by the resource locator using the VPN connection.

2. The method of claim 1, wherein the profile comprises a VPN policy.

3. The method of claim 1, wherein determining whether the resource locator is associated with the security policy comprises determining whether an address for the resource locator is associated with an intranet.

4. The method of claim 1, wherein determining whether the resource locator is associated with the security policy comprises determining whether the resource locator is associated with at least one secure source site.

5. The method of claim 1, further comprising determining that the mobile computing device is not in communication with the VPN before launching the VPN connection.

6. The method of claim 1, wherein accessing the resource comprises using one of a plurality of secure applications, installed on the mobile computing device, to access the resource referred to by the resource locator.

7. The method of claim 6, wherein the security policy identifies the plurality of secure application with which the mobile computing device can access the resource referred to by the resource locator.

8. A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of a mobile computing device, performs a method comprising:

receiving, at a first application of a mobile computing device, a user selection of a resource locator, wherein the resource locator comprises a reference to a resource;

determining, using the mobile computing device, whether the selected resource locator is associated with a security policy; and

in response to determining that the resource locator is associated with the security policy;

activating, in the mobile computing device, a profile identified by the security policy, wherein the profile allows access to the resource, referred to by the resource locator and selected using the first application, if the mobile computing device is connected to a Virtual Private Network (VPN) connection;

launching, at the mobile computing device, the VPN connection; and

accessing the resource referred to by the resource locator using the VPN connection.

9. The non-transitory, computer-readable medium of claim 8, wherein the profile comprises a VPN policy.

10. The non-transitory, computer-readable medium of claim 8, wherein determining whether the resource locator is associated with the security policy comprises determining whether an address for the resource locator is associated with an intranet.

11. The non-transitory, computer-readable medium of claim 8, wherein determining whether the resource locator is associated with the security policy comprises determining whether the resource locator is associated with at least one secure source site.

12. The non-transitory, computer-readable medium of claim 8, further comprising determining that the mobile computing device is not in communication with the VPN before launching the VPN connection.

13. The non-transitory, computer-readable medium of claim 8, wherein accessing the resource comprises using one of a plurality of secure applications, installed on the mobile computing device, to access the resource referred to by the resource locator.

14. The non-transitory, computer-readable medium of claim 13, wherein the security policy identifies the plurality of secure application with which the mobile computing device can access the resource referred to by the resource locator.

15. A system comprising:

a memory storage storing program code; and

a processor coupled to the memory storage, wherein, upon execution, the program code causes the processor to perform stages including;

rendering a resource locator for display in a user interface of a mobile computing device;

receiving a user selection of the resource locator, wherein the resource locator comprises a reference to a resource;

determining whether the selected resource locator is associated with a security policy; and

in response to determining that the resource locator is associated with the security policy;

activating a profile identified by the security policy, wherein the profile allows access to the resource, referred to by the resource locator and selected by a user, if the mobile computing device is connected to a Virtual Private Network (VPN) connection;

launching the VPN connection; and

accessing the resource referred to by the resource locator using the VPN connection.

16. The system of claim 15, wherein the profile comprises a VPN policy.

17. The system of claim 15, wherein determining whether the resource locator is associated with the security policy comprises determining whether an address for the resource locator is associated with an intranet.

18. The system of claim 15, wherein determining whether the resource locator is associated with the security policy comprises determining whether the resource locator is associated with at least one secure source site.

19. The system of claim 15, wherein the stages further comprise determining that the mobile computing device is not in communication with the VPN before launching the VPN connection.

20. The system of claim 15, wherein accessing the resource comprises using one of a plurality of secure applications, installed on the mobile computing device, to access the resource referred to by the resource locator.