Systems and methods for controlling email access

• US 8,832,785 B2
• Filed: 01/14/2013
• Issued: 09/09/2014
• Est. Priority Date: 12/06/2012
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Stuntebeck, Erich, Dabbiere, David
• Primary Examiner(s): NGUYEN, TU T
• Application Number:
  US13/740,606
• Publication Number:
  US 20140165132A1
• Time in Patent Office: 603 Days
• Field of Search: 726/1
• US Class Current: 726/1
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Embodiments of the disclosure relate to proxying at least one email resource from at least one email service to at least one client device, identifying at least one resource rule associated with the email resources, and adding at least one URL to the email resources in accordance with the resource rules.

Claims

1. A system, comprising:

an apparatus comprising at least one processor and at least one memory storing program code instructions, the at least one memory and program code instructions being configured to, with the at least one processor, cause the apparatus to at least;

identify, via at least one processor, at least one resource rule associated with a particular client device, wherein at least one email resource is accessible to the particular client device, wherein the at least one resource rule is identified based at least in part on a device state associated with the particular client device, and wherein the particular client device may only be authorized to access the at least one email resource in an instance in which at least a threshold of the at least one resource rule is satisfied;

determine whether at least one of the identified at least one resource rule comprises a resource rule specifying that the particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises at least one particular uniform resource locator (URL); and

,

in an instance in which it is determined that at least one of the identified at least one resource rule comprises the resource rule specifying that the at least one particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises the at least one particular URL;

determine whether the at least one email resource comprises the at least one particular URL; and

,

in an instance in which it is determined that the at least one email resource does not comprise the at least one particular URL, add the at least one particular URL to the at least one email resource.

2. The system of claim 1, wherein the at least one particular URL comprises a URL that provides access to a website related to at least one of the following:

an enterprise policy, a privacy policy, a confidentiality policy, or an attorney-client privilege.

3. The system of claim 1, wherein the at least one particular URL comprises at least one URL that is configured to be exclusively accessible via a particular browser application.

4. The system of claim 1, wherein the at least one particular URL comprises at least one URL that is digitally signed.

5. The system of claim 1, wherein the at least one particular URL comprises at least one URL that is encrypted.

6. The system of claim 1, wherein the apparatus is further caused to at least:

transmit the at least one email resource to the particular client device.

7. The system of claim 1, wherein the apparatus is further caused to at least:

authorize the particular client device to access the at least one email resource.

8. A method, comprising:

identifying, via at least one processor, at least one resource rule associated with a particular client device, wherein at least one email resource is accessible to the particular client device, wherein the at least one resource rule is identified based at least in part on a device state associated with the particular client device, and wherein the particular client device may only be authorized to access the at least one email resource in an instance in which at least a threshold of the at least one resource rule is satisfied;

determining whether at least one of the identified at least one resource rule comprises a resource rule specifying that the particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises at least one particular uniform resource locator (URL); and

,

in an instance in which it is determined that at least one of the identified at least one resource rule comprises the resource rule specifying that the at least one particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises the at least one particular URL;

determining whether the at least one email resource comprises the at least one particular URL; and

,

in an instance in which it is determined that the at least one email resource does not comprise the at least one particular URL, adding the at least one particular URL to the at least one email resource.

9. The method of claim 8, wherein the at least one particular URL comprises at least one URL that provides access to a website related to at least one of the following:

an enterprise policy, a privacy policy, a confidentiality policy, or an attorney-client privilege.

10. The method of claim 8, wherein the at least one particular URL comprises at least one URL that is configured to be exclusively accessible via a particular browser application.

11. The method of claim 8, wherein the at least one particular URL comprises at least one URL that is digitally signed.

12. The method of claim 8, wherein the at least one particular URL comprises at least one URL that is encrypted.

13. The method of claim 8, further comprising:

authorizing the particular client device to access the at least one email resource.

14. A computer program product comprising a non-transitory computer-readable storage medium having program code portions embodied therein, the program code portions being configured to, upon execution by a processor, cause apparatus to at least:

identify, via at least one processor, at least one resource rule associated with a particular client device, wherein at least one email resource is accessible to the particular client device, wherein the at least one resource rule is identified based at least in part on a device state associated with the particular client device, and wherein the particular client device may only be authorized to access the at least one email resource in an instance in which at least a threshold of the at least one resource rule is satisfied;

determine whether at least one of the identified at least one resource rule comprises a resource rule specifying that the particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises at least one particular uniform resource locator (URL); and

,

in an instance in which it is determined that at least one of the identified at least one resource rule comprises the resource rule specifying that the at least one particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises the at least one particular URL;

determine whether the at least one email resource comprises the at least one particular URL; and

,

in an instance in which it is determined that the at least one email resource does not comprise the at least one particular URL, add the at least one particular URL to the at least one email resource.

15. The computer program product of claim 14, wherein the at least one particular URL comprises at least one URL that provides access to a website related to at least one of the following:

an enterprise policy, a privacy policy, a confidentiality policy, or an attorney-client privilege.

16. The computer program product of claim 14, wherein the at least one particular URL comprises at least one URL that is configured to be exclusively accessible via a particular browser application.

17. The computer program product of claim 14, wherein the at least one particular URL comprises at least one URL that is digitally signed.

18. The computer program product of claim 14, wherein the at least one particular URL comprises at least one URL that is encrypted.

19. The computer program product of claim 14, wherein the apparatus is further caused to at least:

authorize the particular client device to access the at least one email resource.

20. A method, comprising:

identifying, via at least one processor, at least one resource rule associated with a particular client device, wherein at least one email resource is accessible to the particular client device, wherein the at least one resource rule is identified based at least in part on a device state associated with the particular client device, and wherein the particular client device may only be authorized to access the at least one email resource in an instance in which at least a threshold of the at least one resource rule is satisfied;

determining whether at least one of the identified at least one resource rule comprises a resource rule specifying that the particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises at least one particular email resource component; and

,

in an instance in which it is determined that at least one of the identified at least one resource rule comprises the resource rule specifying that the at least one particular client device may only be authorized to access the at least one email resource in an instance in which the at least one email resource comprises the at least one particular email resource component;

determining whether the at least one email resource comprises the at least one particular email resource component; and

,

in an instance in which it is determined that the at least one email resource does not comprise the at least one particular email resource component, adding the at least one particular email resource component to the at least one email resource.

21. The method of claim 20, wherein the at least one particular email resource component comprises at least one of the following:

at least one file attachment, text, or at least one Uniform Resource Locator (URL).

22. The method of claim 20, wherein the at least one particular email resource component comprises at least one email resource component that is related to at least one of the following:

an enterprise policy, a privacy policy, a confidentiality policy, or an attorney-client privilege.

23. The method of claim 20, wherein the at least one particular email resource component comprises at least one email resource component that is configured to be exclusively accessible via a particular browser application.

24. The method of claim 20, wherein the at least one particular email resource component comprises at least one email resource component that is digitally signed.

25. The method of claim 20, wherein the at least one particular email resource component comprises at least one email resource component that is encrypted.

26. The method of claim 20, further comprising:

authorizing the particular client device to access the at least one email resource.