Rights management services integration with mobile device management

• US 9,825,996 B2
• Filed: 11/01/2016
• Issued: 11/21/2017
• Est. Priority Date: 05/16/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Brannon, Jonathan Blake, Sorensen, Christian Blake
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US15/340,745
• Publication Number:
  US 20170048279A1
• Time in Patent Office: 385 Days
• Field of Search: 726 1, 726 26- 33, 713165-167, 713189, 713193
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Rights management services (RMS) integration with mobile device management (MDM) may be provided. A functionality associated with a document may be restricted according to a document management policy. After the document has been transmitted to a receiving device, a request to un-restrict the at least one functionality associated with the document may be received. If it is determined that the receiving device complies with the document management policy, the functionality associated with the document may be un-restricted.

Claims

1. A method comprising:

receiving an indication that a sender device is only authorized to provide a recipient device with access to a message when a first compliance rule and a second compliance rule are satisfied, the first compliance rule requiring that at least one functionality of the document be restricted, and the second compliance rule requiring that the recipient device be configured to restrict at least one functionality of the recipient device;

identifying a request by the sender device to provide the recipient device with access to the message;

causing a restricted document to be generated by causing the document to be configured to restrict the at least one functionality of the document;

causing a determination of whether the recipient device is configured to restrict the at least one functionality of the recipient device; and

,

causing the operating system of the recipient device to configure the recipient device to restrict the at least one functionality of the recipient device when it is determined that the recipient device is not configured to restrict the at least one functionality of the recipient device.

2. The method of claim 1, further comprising:

causing the recipient device to be authorized to access the restricted document when it is determined that the recipient device is configured to restrict the at least one functionality of the recipient device.

3. The method of claim 1, further comprising:

causing the recipient device to be transmitted the restricted document when it is determined that the recipient device is configured to restrict the at least one functionality of the recipient device.

4. The method of claim 1, wherein causing the restricted document to be generated by causing the document to be configured to restrict the at least one functionality of the document comprises embedding at least one rights management policy into the restricted document.

5. The method of claim 4, wherein the recipient device comprises an application configured to provide access to the restricted document in accordance with the embedded at least one rights management policy.

6. The method of claim 1, wherein the at least one functionality of the document that must be restricted according to the first compliance policy comprises a functionality for accessing at least a portion the document by a particular user of the recipient device.

7. The method of claim 1, wherein the at least one functionality of the document that must be restricted according to the first compliance policy comprises a functionality for printing at least a portion the document by a particular user of the recipient device.

8. The method of claim 1, wherein the at least one functionality of the document that must be restricted according to the first compliance policy comprises a functionality for copying at least a portion of the document by a particular user of the recipient device.

9. The method of claim 1, wherein the at least one functionality of the document that must be restricted according to the first compliance policy comprises a functionality for editing at least a portion of the document by a particular user of the recipient device.

10. The method of claim 1, wherein the recipient device comprises a first recipient device, and wherein the at least one functionality of the document that must be restricted according to the first compliance policy comprises a functionality for providing a second recipient device with access to at least a portion of the document.

11. The method of claim 1, wherein the at least one functionality of the recipient device that must be restricted according to the second compliance policy comprises a functionality related to at least one hardware feature of the recipient device.

12. The method of claim 1, wherein the at least one functionality of the recipient device that must be restricted according to the second compliance policy comprises a functionality related to at least one software feature of the recipient device.

13. The method of claim 1, wherein the at least one functionality of the recipient device that must be restricted according to the second compliance policy comprises a functionality related to at least one mobile device management feature of the recipient device.

14. The method of claim 1, wherein the sender device comprises a device managed by a compliance server, and wherein the recipient device comprises a device managed by the compliance server.

15. The method of claim 14, wherein at least one of the first compliance rule or the second compliance rule are configured by an administrative user of the compliance server.

16. The method of claim 1, wherein the sender device comprises a device managed by a first compliance server, and wherein the recipient device comprises a device managed by a second compliance server.

17. The method of claim 16, wherein at least one of the first compliance rule or the second compliance rule are configured by an administrative user of the first compliance server.

18. The method of claim 16, wherein at least one of the first compliance rule or the second compliance rule are configured by an administrative user of the second compliance server.

19. An apparatus, comprising:

at least one processor;

and

at least one memory comprising executable instructions, which when executed by the at least one processor cause the apparatus to at least;

receive an indication that a sender device is only authorized to provide a recipient device with access to a message when a first compliance rule and a second compliance rule are satisfied, the first compliance rule requiring that at least one functionality of the document be restricted, and the second compliance rule requiring that

the recipient device be configured to restrict at least one functionality of the recipient device;

identify a request by the sender device to provide the recipient device with access to the message;

cause a restricted document to be generated by causing the document to be configured to restrict the at least one functionality of the document;

cause a determination of whether the recipient device is configured to restrict the at least one functionality of the recipient device; and

,

cause the operating system of the recipient device to configure the recipient device to restrict the at least one functionality of the recipient device when it is determined that the recipient device is not configured to restrict the at least one functionality of the recipient device.

20. A non-transitory computer-readable medium storing a plurality of computer instructions executable by a computing device, the plurality of computer instructions being configured to cause the computing device to at least:

receive an indication that a sender device is only authorized to provide a recipient device with access to a message when a first compliance rule and a second compliance rule are satisfied, the first compliance rule requiring that at least one functionality of the document be restricted, and the second compliance rule requiring that the recipient device be configured to restrict at least one functionality of the recipient device;

identify a request by the sender device to provide the recipient device with access to the message;

cause a restricted document to be generated by causing the document to be configured to restrict the at least one functionality of the document;

cause a determination of whether the recipient device is configured to restrict the at least one functionality of the recipient device; and

,

cause the operating system of the recipient device to configure the recipient device to restrict the at least one functionality of the recipient device when it is determined that the recipient device is not configured to restrict the at least one functionality of the recipient device.