Securing Access to Resources on a Network

• US 20140157354A1
• Filed: 06/20/2013
• Published: 06/05/2014
• Est. Priority Date: 02/14/2012
• Status: Abandoned Application

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: Skysocket LLC
• Inventors: Marshall, John, Stuntebeck, Erich
• Application Number:
  US13/922,665
• Publication Number:
  US 20140157354A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Secure access to resources on a network may be provided. Upon receiving a request for at least one resource, a determination may be made as to whether the at least one resource comprises a secure resource. In response to determining that the at least one resource comprises a secure resource, the at least one resource may be retrieved; and at least one security policy may be applied to the at least one resource.

Claims

1. A method comprising:

receiving a request for at least one resource;

determining whether the at least one resource comprises a secure resource;

in response to determining that the at least one resource comprises a secure resource, causing the at least one resource to be retrieved; and

applying at least one security policy to the at least one resource.

2. The method of claim 1, wherein determining whether the at least one resource comprises a secure resource comprises determining whether the request was received from a trusted source.

3. The method of claim 1, further comprising:

determining whether the at least one security policy is in compliance; and

in response to determining that the at least one security policy is not in compliance, preventing access to the at least one resource.

4. The method of claim 1, wherein causing the at least one resource to be retrieved comprises redirecting the request from a default application to a non-default application.

5. The method of claim 1, further comprising:

logging the request for the at least one resource.

6. The method of claim 5, further comprising:

generating an activity report comprising a plurality of logged requests; and

causing the activity report to be provided to a user.

7. The method of claim 1, wherein the request for the at least one resource is associated with a selection of a hyperlink.

8. The method of claim 7, wherein causing the at least one resource to be retrieved comprises causing a secure application to retrieve the at least one resource.

9. An apparatus comprising:

a memory storage; and

a processing unit coupled to the memory storage, the processing unit configured to;

receive a request for at least one resource,

determine whether the at least one resource comprises a secure resource,

in response to determining that the at least one resource comprises a secure resource, cause the at least one resource to be retrieved, and

apply at least one security policy to the at least one resource.

10. The apparatus of claim 9, wherein the processing unit is further configured to:

store the at least one resource in a secure location of the memory storage.

11. The apparatus of claim 9, wherein the processing unit is further configured to:

remove the at least one resource from the secure location.

12. The apparatus of claim 11, wherein the processing unit is further configured to:

remove a plurality of resources from the secure location on a configurable basis.

13. The apparatus of claim 9, wherein the processing unit is further configured to:

modify the at least one resource.

14. A computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

receiving a request for at least one resource;

determining whether the at least one resource comprises a secure resource;

in response to determining that the request comprises a secure request, causing the at least one resource to be retrieved; and

applying at least one security policy to the at least one resource.

15. The computer-readable medium of claim 14, wherein applying the at least one security policy to the at least one resource comprises modifying the at least one resource.

16. The computer-readable medium of claim 15, wherein modifying the at least one resource comprises at least one of the following:

adding control data to the at least one resource, associating the at least one resource with an application, removing at least a portion of the at least one resource, encrypting the at least one resource, and disabling a functionality associated with the at least one resource.

17. The computer-readable medium of claim 15, wherein applying the at least one security policy to the at least one resource comprises restricting access to the at least one resource according to a security criterion.

18. The computer-readable medium of claim 14, wherein determining whether the at least one resource comprises a secure resource comprises determining whether the request is received from a trusted source.

19. The computer-readable medium of claim 14, further comprising:

caching a plurality of secure resources prior to receiving the request for the at least one resource; and

applying the at least one security policy to at least one of the plurality of secure resources.

20. The computer-readable medium of claim 19, further comprising:

determining whether the at least one resource comprises one of the cached plurality of secure resources;

in response to determining that the at least one resource comprises one of the cached plurality of secure resources, determining whether the at least one security policy is in compliance; and

in response to determining that the at least one security policy is in compliance, providing access to the at least one resource from the cached plurality of secure resources.