Mediating resource access based on a physical location of a mobile device

• US 8,789,144 B2
• Filed: 10/06/2011
• Issued: 07/22/2014
• Est. Priority Date: 10/06/2010
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Mazzaferri, Richard, Duursma, Martin, Hackett, Donovan, Laborczfalvi, Lee
• Primary Examiner(s): Dinh, Minh
• Application Number:
  US13/267,031
• Publication Number:
  US 20120102549A1
• Time in Patent Office: 1,020 Days
• Field of Search: None
• US Class Current: 726/4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

One or more techniques are provided for causing a location of a screen image associated with a resource to be adjusted on a display device. The adjustment may be based at least in part on determining that a control element receives focus. The resource may be associated with an application, such as an email application that may be hosted remotely from a client device. Access to one or more resources may be controlled or mediated. Access rights may be based at least in part on a determination of a geographic location of a client device. When the client device is located in a safe area, the client device may be provided access to the resource. When the client device is not located in a safe area, the client device might not be provided access to the resource or might not be provided full access to the resource.

Claims

1. A method comprising:

executing, by a first computing device, an application on behalf of a second computing device;

receiving information indicating a location of the second computing device;

determining that the location of the second computing device is a safe location by at least comparing the location of the second computing device to at least one of one or more authorized locations in which access to one or more e-mails is authorized, wherein the one or more e-mails includes an indication of the one or more authorized locations; and

responsive to determining that the location of the second computing device is a safe location, providing, by the first computing device, the second computing device with access to the one or more e-mails in connection with execution of the application and transmitting application output data indicative of the one or more e-mails to the second computing device.

2. The method of claim 1, wherein the application output data indicative of the one or more e-mails includes draw commands and images generated by the application.

3. The method of claim 1, further comprising:

providing, by the first computing device, access to one or more remote files subject to the second computing device being within one or more additional authorized locations in which access to the one or more remote files is authorized.

4. The method of claim 1, further comprising:

receiving, at the first computing device, information indicating a second location of the second computing device;

determining that the second location of the second computing device is an unsafe location; and

responsive to determining that the second location of the second computing device is an unsafe location, restricting access to the one or more e-mails.

5. The method of claim 4, further comprising:

transmitting graphical or audio data to the second computing device indicating that access to the one or more e-mails is restricted.

6. The method of claim 4, further comprising:

causing one or more indications of the one or more e-mails to be removed from a display screen associated with the second computing device responsive to restricting access to the one or more e-mails.

7. The method of claim 1, wherein the information indicating the location of the second computing device includes GPS location information of the second computing device.

8. The method of claim 1, wherein determining that the location of the second computing device is a safe location includes determining that the location of the second computing device is within a threshold distance of the at least one of the one or more authorized locations.

9. The method of claim 1, wherein the indication of the at least one of the one or more authorized locations includes an indication of at least one location in which a recipient of the one or more e-mails is authorized to access the one or more e-mails.

10. An apparatus, comprising:

a processor; and

memory storing executable instructions that, when executed by the processor, cause the apparatus to;

execute an application on behalf of a computing device,

receive information indicating a location of the computing device,

determine that the location of the computing device is a safe location by at least comparing the location of the computing device to at least one of one or more authorized locations in which access to one or more e-mails is authorized, wherein the one or more e-mails includes an indication of the one or more authorized locations, and

responsive to determining that the location of the computing device is a safe location, provide the computing device with access to the one or more e-mails in connection with execution of the application and transmit application output data indicative of the one or more e-mails to the computing device.

11. The apparatus of claim 10, wherein the application output data indicative of the one or more e-mails includes draw commands and images generated by the application.

12. The apparatus of claim 10, wherein the executable instructions, when executed by the processor, cause the apparatus to:

provide access to one or more remote files subject to the computing device being within one or more additional authorized locations in which access to the one or more remote files is authorized.

13. The apparatus of claim 10, wherein the executable instructions, when executed by the processor, cause the apparatus to:

receive information indicating a second location of the computing device,

determine that the second location of the computing device is an unsafe location, and

responsive to determining that the second location of the computing device is an unsafe location, restrict access to the one or more e-mails.

14. The apparatus of claim 13, wherein the executable instructions, when executed by the processor, cause the apparatus to:

transmit graphical or audio data to the computing device indicating that access to the one or more e-mails is restricted.

15. The apparatus of claim 13, wherein the executable instructions, when executed by the processor, cause the apparatus to:

cause one or more indications of the one or more e-mails to be removed from a display screen associated with the computing device responsive to restricting access to the one or more e-mails.

16. The apparatus of claim 10, wherein the information indicating the location of the computing device includes GPS location information of the computing device.

17. The apparatus of claim 10, wherein determining that the location of the computing device is a safe location includes determining that the location of the computing device is within a threshold distance of the at least one of the one or more authorized locations.

18. A method comprising:

executing, by a first computing device, a first application on behalf of a second computing device;

executing, by the first computing device, a second application on behalf of a third computing device;

receiving information indicating a location of the second computing device;

determining that the location of the second computing device is a safe location at least by comparing the location of the second computing device to at least one of one or more authorized locations in which access to a first set of e-mails is authorized, wherein the first set of e-mails includes an indication of the one or more authorized locations;

responsive to determining that the location of the second computing device is a safe location, providing, based at least in part on a consumption of a first license, the second computing device with access to the first set of e-mails in connection with the first application and transmitting application output data indicative of the first set of e-mails to the second computing device;

receiving information indicating a location of third computing device;

determining that the location of the third computing device is a safe location; and

responsive to determining that the location of the third computing device is a safe location, providing, based at least in part on a consumption of a second license, the third computing device with access to a second set of e-mails in connection with execution of the second application and transmitting application output data indicative of the second set of e-mails to the third computing device,

wherein the first license is associated with a first usage-based charge different from a second usage-based charge associated with the second license.