Rights management services integration with mobile device management

• US 9,058,495 B2
• Filed: 05/16/2013
• Issued: 06/16/2015
• Est. Priority Date: 05/16/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Brannon, Jonathan Blake, Sorensen, Christian Blake
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US13/895,739
• Publication Number:
  US 20130254837A1
• Time in Patent Office: 761 Days
• Field of Search: 726/1, 726 26- 33, 713165-167, 713/189, 713/193
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Rights management services (RMS) integration with mobile device management (MDM) may be provided. A functionality associated with a document may be restricted according to a document management policy. After the document has been transmitted to a receiving device, a request to un-restrict the at least one functionality associated with the document may be received. If it is determined that the receiving device complies with the document management policy, the functionality associated with the document may be un-restricted.

Claims

1. A method comprising:

restricting at least one functionality associated with a document according to a compliance policy, the document being associated with a sender device;

transmitting the document to at least one recipient device;

receiving, in a rights management server associated with the sender device, a request to un-restrict the at least one functionality associated with the document, the request being associated with an application associated with viewing of the document on the at least one recipient device;

receiving, in the rights management server, an indication from a compliance server associated with the at least one recipient device, wherein the rights management server is associated with the sender device and the compliance server is associated with the at least one recipient device, the indication being associated with whether the at least one recipient device complies with the compliance policy;

determining, in the rights management server, whether the at least one recipient device complies with the compliance policy based at least in part upon the indication received from the compliance server;

transmitting, from the rights management server to the compliance server, an authorization to un-restrict the at least one functionality associated with the document; and

in response to determining that the at least one recipient device complies with the compliance policy, initiating un-restricting the at least one functionality associated with the document by the application associated with viewing of the document by the at least one recipient device.

2. The method of claim 1, wherein the document comprises at least one of the following:

an e-mail message, a text message, a word processing document, a spreadsheet, a presentation, an instant message, a binary file, an audio file, a video file, a voicemail, and a contact information document.

3. The method of claim 1, wherein the compliance policy is associated with a first organization.

4. The method of claim 3, wherein the sender device of the document is associated with the first organization.

5. The method of claim 4, wherein the at least one recipient device is associated with a second organization.

6. The method of claim 1, wherein the at least one functionality comprises at least one of the following:

opening the document, forwarding the document, modifying the document, saving the document, deleting the document, opening the document, and sharing the document.

7. The method of claim 1, wherein restricting the at least one functionality comprises encrypting the document.

8. The method of claim 1, wherein restricting the at least one functionality comprises requiring at least one compliance policy be in effect before the at least one functionality is un-restricted.

9. The method of claim 8, wherein the at least one compliance policy comprises at least one of the following:

a device restriction, a device requirement, a user restriction, a time restriction, and a location restriction.

10. The method of claim 1, further comprising:

logging the request to un-restrict the at least one functionality associated with the document.

11. A system comprising:

a memory storage; and

a processor coupled to the memory storage, wherein the processor is configured to;

receive a document comprising at least one restricted functionality,

identify a requirement for un-restricting the at least one restricted functionality by receiving a compliance policy from a compliance server, wherein the system is associated with a first user and the compliance server is associated with a second user,

satisfy the requirement for un-restricting the at least one restricted functionality by facilitating a communication between a second compliance server associated with the first user to the compliance server associated with the second user, and

perform the un-restricted at least one functionality.

12. The system of claim 11, wherein the second user comprises a sender of the document.

13. The system of claim 11, wherein being operative to satisfy the requirement for un-restricting the at least one restricted functionality comprises the processor being further operative to instruct the second compliance server to provide at least one compliance policy associated with the system to the compliance server associated with the second user.

14. A non-transitory computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

receiving an encrypted document from a sender;

identifying a first compliance server associated with the sender;

facilitating an exchange of a plurality of data between the first compliance server and a second compliance server associated with a recipient of the encrypted document, the exchanged plurality of data comprises at least one device compliance rule;

determining whether the first compliance server is satisfied with the exchanged plurality of data; and

in response to determining that the first compliance server is satisfied with the exchanged plurality of data;

receiving a decryption key associated with the document,

decrypting the document, and

displaying the document;

in response to determining that the first compliance server is not satisfied with the exchanged plurality of data;

modifying a configuration setting associated with the at least one device compliance rule, and

facilitating a second exchange of a second plurality of data between the first compliance server and the second compliance server.

15. The non-transitory computer-readable medium of claim 14, further comprising:

determining whether the first compliance server is satisfied with the second exchanged plurality of data; and

in response to determining that the first compliance server is not satisfied with the exchanged plurality of data, deleting the document.