Distribution of variably secure resources in a networked environment

• US 10,257,194 B2
• Filed: 03/14/2013
• Issued: 04/09/2019
• Est. Priority Date: 02/14/2012
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Stuntebeck, Erich
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Wyszynski, Aubrey H
• Application Number:
  US13/830,708
• Publication Number:
  US 20130212650A1
• Time in Patent Office: 2,217 Days
• Field of Search: 726 4
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/105 Multiple levels of security

Abstract

A method of receiving a request to access a plurality of resources and determining whether a first resource of the plurality of resources is associated with a different authorization requirement than at least one second resource of the plurality of resources. In response to determining that the first resource of the plurality of resources is associated with a different authorization requirement than the at least one second resource of the plurality of resources, determining whether the request includes the authorization requirement for the first resource and the authorization requirement for the second resource. In response to determining that the request includes the authorization requirement for the first resource and the authorization requirement for the second resource, providing access to the first resource and the at least one second resource.

Claims

1. A method comprising:

receiving a request from an application executing on a client device to access a first set of resources and a second set of resources;

determining that the first set of resources is associated with a first distribution rule that permits the first set of resources being rendered while the client device is not in communication with a distribution service;

determining that the second set of resources is associated with a second distribution rule that prohibits the second set of resources being rendered while the client device is not in communication with the distribution service;

detecting whether the client device is in communication with the distribution service; and

in response to receiving the request and detecting that the client device is not in communication with the distribution service;

denying the application access to the second set of resources according to the second distribution rule; and

permitting the application access to the first set of resources according to the first distribution rule.

2. The method of claim 1, wherein:

the first set of resources is not associated with a user credential requirement; and

the second set of resources is associated with the user credential requirement.

3. The method of claim 1, wherein:

the first set of resources is not associated with a device identifier requirement; and

the second set of resources is associated with the device identifier requirement.

4. The method of claim 1, wherein:

the request is received in the client device; and

detecting whether the client device is in communication with the distribution service comprises parsing client device profile data.

5. The method of claim 1, wherein data included within the request comprises:

a device identifier that identifies the client device; and

a credential that identifies a user of the client device.

6. The method of claim 1, wherein detecting whether the client device is in communication with the distribution service comprises detecting whether the client device is connected to a network.

7. A method, comprising:

receiving a request from an application executing on a client device to access a first resource and a second resource;

identifying a first authorization requirement associated with the first resource, wherein the first authorization requirement permits the first resource being rendered when the client device is not in communication with a distribution service;

identifying a second authorization requirement associated with the second resource, wherein the second authorization requirement prohibits the second resource being rendered when the client device is not in communication with the distribution service;

detecting whether the client device is in communication with the distribution service; and

in response to receiving the request and detecting that the client device is not in communication with the distribution service, permitting the application access to the first resource according to the first authorization requirement and prohibiting the application access to the second resource according to the second authorization requirement.

8. The method of claim 7, wherein the method further comprises:

detecting whether at least one of the first resource or the second resource is associated with at least one distribution rule.

9. The method of claim 7, wherein the method further comprises:

detecting if a user credential associated with the client device is associated with at least one distribution rule; and

in response to the user credential being associated with the at least one distribution rule, sending the at least one distribution rule to the client device.

10. The method of claim 7, wherein the method further comprises:

detecting if a device identifier associated with the client device is associated with at least one distribution rule; and

in response to the device identifier being associated with the at least one distribution rule, sending the at least one distribution rule to the client device.

11. The method of claim 7, wherein the client device operates subject to a plurality of distribution rules, at least one of the plurality of distribution rules defining at least one of the first authorization requirement or the second authorization requirement.

12. The method of claim 7, wherein detecting whether the client device is in communication with the distribution service comprises detecting whether the client device is connected to a network.

13. A non-transitory computer-readable medium encoded with software that, when executed by a computing device, causes the computing device to at least:

receive a request from an application executing on a client device to access a first set of resources and a second set of resources;

identify a first distribution rule associated with the first set of resources, wherein the first distribution rule permits the first set of resources being rendered while the computing device is not in communication with a distribution service;

identify a second distribution rule associated with the second set of resources, wherein the second distribution rule prohibits the second set of resources being rendered while the computing device is not in communication with the distribution service;

detect whether the computing device is in communication with the distribution service; and

in response to receiving the request and detecting that the computing device is not in communication with the distribution service, permitting the application access to the first set of resources according to the first distribution rule and denying the application access to the second set of resources according to the second distribution rule.

14. The non-transitory computer-readable medium of claim 13, wherein the software is further operable to cause the computing device to at least:

receive, from the distribution service, at least one distribution rule associated with at least one of the first set of resources or the second set of resources.

15. The non-transitory computer-readable medium of claim 13, wherein the software is further operable to cause the computing device to at least:

determine to revoke a right to access the ;

first set of resources or the second set of resources; and

send a notification of revocation to the distribution service.

16. The non-transitory computer-readable medium of claim 15, wherein:

determining to revoke the right to access comprises receiving an unauthorized input from a user.

17. The non-transitory computer-readable medium of claim 15, wherein:

determining to revoke the right to access comprises determining a client device does not comply with at least one distribution rule.

18. The non-transitory computer-readable medium of claim 13, wherein the software further causes the computing device to detect whether the computing device is connected to a network.