Systems and Methods for Controlling Email Access

• US 20140245381A1
• Filed: 05/07/2014
• Published: 08/28/2014
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich, Dabbiere, David
• Granted Patent: US 9,325,713 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Embodiments of the disclosure relate to proxying at least one email resource from at least one email service to at least one client device, identifying at least one resource rule associated with the email resources, and adding at least one URL to the email resources in accordance with the resource rules.

Claims

1. A system, comprising:

at least one client device;

at least one email service; and

,

an apparatus comprising at least one processor and at least one memory storing program code instructions, the at least one memory and program code instructions being configured to, with the at least one processor, cause the apparatus to at least;

proxying at least one email resource between the at least one client device and the at least one email service;

detecting a device state associated with the at least one client device;

identifying, based at least in part on the device state associated with the at least one client device, at least one resource rule; and

,

adding at least one uniform resource locator (URL) to the at least one email resource in an instance in which it is required by the at least one resource rule.

2. (canceled)

3. (canceled)

4. (canceled)

5. (canceled)

6. (canceled)

7. (canceled)

8. (canceled)

9. A method, comprising:

identifying at least one email resource accessible to at least one client device;

detecting a device state associated with the at least one client device;

identifying, based at least in part on the device state associated with the at least one client device, at least one resource rule; and

,

adding at least one uniform resource location (URL) to the at least one email resource in an instance in which it is required by the at least one resource rule.

10. (canceled)

11. (canceled)

12. (canceled)

13. (canceled)

14. (canceled)

15. (canceled)

16. A computer program product comprising a non-transitory computer-readable storage medium having program code portions embodied therein, the program code portions being configured to, upon execution by a processor, cause apparatus to at least:

identify at least one email resource accessible to at least one client device;

detect a device state associated with the at least one client device;

identify, based at least in part on the device state associated with the at least one client device, at least one resource rule; and

,

adding at least one uniform resource locator (URL) to the at least one email resource in an instance in which it is required by the at least one resource rule.

17. (canceled)

18. (canceled)

19. (canceled)

20. (canceled)

21. (canceled)

22. (canceled)

23. A method, comprising:

identifying at least one email resource accessible to at least one client device;

detecting a device state associated with the at least one client device;

identifying, based at least in part on the device state associated with the at least one client device, at least one resource rule; and

,

adding at least one email resource component to the at least one email resource in an instance in which it is required by the at least one resource rule.

31. The method of claim 23, wherein the device state associated with the at least one client device comprises information regarding a geographic location associated with the at least one client device.

32. The method of claim 23, wherein the device state associated with the at least one client device comprises information regarding a current time associated with the at least one client device.

33. The method of claim 23, wherein the device state associated with the at least one client device comprises information regarding at least one network accessible to the at least one client device.

34. The method of claim 23, wherein the device state associated with the at least one client device comprises information regarding at least one network beacon accessible to the at least one client device.

35. The method of claim 23, wherein the device state associated with the at least one client device comprises information regarding at least one of the following:

at least one hardware feature of the at least one client device, at least one software feature of the at least one client device, or at least one application accessible to the at least one client device.

36. The method of claim 23, wherein the device state associated with the at least one client device comprises a current device state.

37. The method of claim 23, wherein the device state associated with the at least one client device comprises a past device state.

38. The method of claim 23, wherein the at least one resource rule comprises a requirement that the at least one email resource must contain particular information.

39. The method of claim 38, wherein the particular information comprises particular information regarding at least one of the following:

a particular enterprise, privacy, confidentiality, or legal privilege.

40. The method of claim 38, wherein the at least one email resource component comprises the particular information.

41. The method of claim 23, wherein the at least one resource rule comprises a variably stringent resource rule, and wherein a stringency of the variably stringent resource rule is based at least in part on the device state associated with the at least one client device.

42. The method of claim 23, further comprising:

causing at least one portion of the at least one email resource to be encrypted based at least in part on a particular encryption protocol, wherein at least one application other than a particular application is not capable of decrypting the at least one portion of the at least one email resource encrypted based at least in part on the particular encryption protocol, and wherein the particular application is capable of decrypting the at least one portion of the at least one email resource encrypted based at least in part on the particular encryption protocol.

43. The method of claim 42, wherein the particular application comprises an application configured to cause the at least one client device to be unauthorized to access the at least one email resource in an instance in which the at least one resource rule is not satisfied.

44. The method of claim 23, wherein the at least one email resource component comprises at least one uniform resource locator (URL).

45. The method of claim 23, wherein the at least one email resource component comprises at least one file attachment.

46. The method of claim 23, wherein the at least one email resource component comprises text.

47. The method of claim 23, further comprising:

determining whether the at least one resource rule is satisfied; and

,

in an instance in which it is determined that the at least one resource rule is satisfied, causing the at least one client device to be authorized to access the at least one email resource.

48. The method of claim 47, wherein causing the at least one client device to be authorized to access the at least one email resource comprises causing the at least one email resource to be transmitted to the at least one client device.

49. The method of claim 47, wherein causing the at least one client device to be authorized to access the at least one email resource comprises causing at least one particular decryption key to be transmitted to the at least one client device, the at least one particular decryption key being required to access the at least one email resource.

50. The method of claim 47, wherein causing the at least one client device to be authorized to access the at least one email resource comprises causing an authorization indication to be transmitted to the at least one client device, the authorization indication specifying that the at least one client device is authorized to access the at least one email resource.

51. The method of claim 47, further comprising:

in an instance in which it is determined that the at least one resource rule is not satisfied, causing the at least one client device to be unauthorized to access the at least one email resource.

52. The method of claim 23, further comprising:

receiving a request to access the at least one email resource, the request to access the at least one email resource comprising information regarding the device state associated with the at least one client device.

53. The method of claim 23, wherein the method is performed at least in part by an access control service executed by an access control server, the access control service being communicatively coupled to the at least one client device and being configured to cause the at least one client device to be unauthorized to access the at least one email resource in an instance in which the at least one resource rule is not satisfied.

54. The method of claim 23, wherein the method is performed at least in part by a client side application executed by the at least one client device, the client side application being communicatively coupled to an access control service executed by an access control server and being configured to cause the at least one client device to be unauthorized to access the at least one email resource in an instance in which the at least one resource rule is not satisfied.

55. The method of claim 23, wherein the method is performed at least in part by an email service at the direction of an access control service executed by an access control server, the email service being configured to cause the at least one client device to be unauthorized to access the at least one email resource in an instance in which the at least one resource rule is not satisfied.

56. The method of claim 23, wherein the method is performed at least in part by an email service at the direction of a client side application executed by the at least one client device, the email service being configured to cause the at least one client device to be unauthorized to access the at least one email resource in an instance in which the at least one resource rule is not satisfied.

24. (canceled)

25. (canceled)

26. (canceled)

27. (canceled)

28. (canceled)

29. (canceled)

30. (canceled)