Mediating resource access based on a physical location of a mobile device

• US 9,270,678 B2
• Filed: 06/10/2014
• Issued: 02/23/2016
• Est. Priority Date: 10/06/2010
• Status: Active Grant

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Mazzaferri, Richard, Duursma, Martin, Hackett, Donovan, Laborczfalvi, Lee
• Primary Examiner(s): Chen, Shin-Hon
• Application Number:
  US14/300,702
• Publication Number:
  US 20140289816A1
• Time in Patent Office: 623 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 3/0481 based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

One or more techniques are provided for causing a location of a screen image associated with a resource to be adjusted on a display device. The adjustment may be based at least in part on determining that a control element receives focus. The resource may be associated with an application, such as an email application that may be hosted remotely from a client device. Access to one or more resources may be controlled or mediated. Access rights may be based at least in part on a determination of a geographic location of a client device. When the client device is located in a safe area, the client device may be provided access to the resource. When the client device is not located in a safe area, the client device might not be provided access to the resource or might not be provided full access to the resource.

Claims

1. A method comprising:

executing, by a first computing device, an application on behalf of a second computing device, resulting in an application resource being hosted by the first computing device for the second computing device in connection with execution of the application, wherein the application resource includes an indication of one or more authorized locations in which access to the application resource is authorized;

receiving information indicating a location of the second computing device;

determining that the location of the second computing device is a safe location at least by comparing the location of the second computing device to at least one of the one or more authorized locations; and

responsive to determining that the location of the second computing device is a safe location, providing, by the first computing device, the second computing device with access to the application resource and transmitting application output data indicative of the application resource to the second computing device.

2. The method of claim 1, wherein the application resource includes one or more emails.

3. The method of claim 1, wherein the application output data indicative of the application resource includes draw commands and images generated by the application.

4. The method of claim 1, wherein the application resource includes one or more remote files.

5. The method of claim 1, further comprising:

receiving, at the first computing device, information indicating a second location of the second computing device;

determining that the second location of the second computing device is an unsafe location; and

responsive to determining that the second location of the second computing device is an unsafe location, restricting access to the application resource.

6. The method of claim 5, further comprising:

transmitting graphical or audio data to the second computing device indicating that access to the application resource is restricted.

7. The method of claim 5, further comprising:

causing the application resource to be removed from a display screen associated with the second computing device responsive to restricting access to the application resource.

8. The method of claim 1, wherein the information indicating the location of the second computing device includes GPS location information of the second computing device.

9. The method of claim 1, wherein determining that the location of the second computing device is a safe location includes determining that the location of the second computing device is within a threshold distance of a currently occurring event.

10. The method of claim 1, wherein the application resource includes an email, wherein the email includes the indication of the one or more authorized locations, and the indication of the one or more authorized locations includes an indication of at least one location in which a recipient of the email is authorized to access the email.

11. The method of claim 1, wherein the application output data includes data for displaying an interface of the application, wherein a displaying of one or more items in the interface is determined based on the information indicating a location of the second computing device.

12. An apparatus, comprising:

a processor; and

memory storing executable instructions that, when executed by the processor, cause the apparatus to;

execute an application on behalf of a computing device, resulting in an application resource being hosted by the apparatus for the computing device in connection with execution of the application, wherein the application resource includes an indication of one or more authorized locations in which access to the application resource is authorized;

receive information indicating a location of the computing device;

determine that the location of the computing device is a safe location at least by comparing the location of the computing device to at least one of the one or more authorized locations; and

responsive to determining that the location of the computing device is a safe location, provide the computing device with access to the application resource and transmit application output data indicative of the application resource to the computing device.

13. The apparatus of claim 12, wherein the application resource includes one or more emails.

14. The apparatus of claim 12, wherein the application output data indicative of the application resource includes draw commands and images generated by the application.

15. The apparatus of claim 12, wherein the application resource includes one or more remote files.

16. The apparatus of claim 12, wherein the executable instructions, when executed by the processor, cause the apparatus to:

receive information indicating a second location of the computing device,

determine that the second location of the computing device is an unsafe location, and

responsive to determining that the second location of the computing device is an unsafe location, restrict access to the application resource.

17. The apparatus of claim 16, wherein the executable instructions, when executed by the processor, cause the apparatus to:

transmit graphical or audio data to the computing device indicating that access to the application resource is restricted.

18. The apparatus of claim 16, wherein the executable instructions, when executed by the processor, cause the apparatus to:

cause the application resource to be removed from a display screen associated with the computing device responsive to restricting access to the application resource.

19. The apparatus of claim 12, wherein the information indicating the location of the computing device includes GPS location information of the computing device.

20. The apparatus of claim 12, wherein causing the apparatus to determine that the location of the computing device is a safe location includes causing the apparatus to determine that the location of the computing device is within a threshold distance of a currently occurring event.

21. A method comprising:

executing, by a first computing device, a first application on behalf of a second computing device, resulting in a first application resource being hosted by the first computing device for the second computing device in connection with execution of the first application, wherein the first application resource includes an indication of one or more authorized locations in which access to the first application resource is authorized;

executing, by the first computing device, a second application on behalf of a third computing device, resulting in a second application resource being hosted by the first computing device for the third computing device in connection with execution of the second application, wherein the second application resource includes an indication of one or more authorized locations in which access to the second application resource is authorized;

receiving information indicating a location of the second computing device;

determining that the location of the second computing device is a safe location at least by matching the location of the second computing device to at least one of the one or more authorized locations in which access to the first application resource is authorized;

responsive to determining that the location of the second computing device is a safe location, providing, based at least in part on a consumption of a first license, the second computing device with access to the first application resource and transmitting application output data indicative of the first application resource to the second computing device;

receiving information indicating a location of third computing device;

determining that the location of the third computing device is a safe location at least by matching the location of the third computing device to at least one of the one or more authorized locations in which access to the second application resource is authorized; and

responsive to determining that the location of the third computing device is a safe location, providing, based at least in part on a consumption of a second license, the third computing device with access to the second application resource and transmitting application output data indicative of the second application resource to the third computing device.