METHOD AND APPARATUS FOR PROVIDING PROXY-BASED ACCESS CONTROLS

• US 20120222107A1
• Filed: 03/24/2011
• Published: 08/30/2012
• Est. Priority Date: 02/28/2011
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Sainio, Miikka Johannes, Lahtiranta, Atte
• Granted Patent: US 9,838,392 B2
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/088 using filters or firewalls

Abstract

An approach is provided for proxy-based access controls. A proxy platform causes, at least in part, designation of at least one monitoring client of a proxy server. The proxy platform receives an input for associating one or more accessing clients with the at least one monitoring client. The at least one monitoring client manages access to one or more resources of the proxy server by the one or more accessing clients.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

a designation of at least one monitoring client of a proxy server; and

an input for associating one or more accessing clients with the at least one monitoring client,

wherein the at least one monitoring client manages access to one or more resources of the proxy server by the one or more accessing clients.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

another input, from the at least one monitoring client, for specifying one or more access policies, one or more access lists, or a combination thereof with respect to the one or more resources.

3. A method of claim 2, wherein the one or more access policies are specific to all or a subset of the one or more accessing clients.

4. A method of claim 2, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a request, from the one or more accessing clients, for accessing at least one of the one or more resources;

a processing the one or more access policies, one or more default access policies, or a combination thereof to determine whether to grant or deny the request.

5. A method of claim 4, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a notification to the at least one monitoring client requesting an approval for the request,

wherein the determination of whether to grant or deny the request is further based, at least in part, on the approval.

6. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

respective access histories for the one or more accessing clients; and

at least one determination to provide access to the respective access histories to the at least one monitoring client via the proxy server.

7. A method of claim 6, wherein the respective access histories include, at least in part, a web history, a call history, a text messaging history, a bandwidth usage history, or a combination thereof.

8. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination to provide access to context information associated with the one or more accessing clients to the at least one monitoring client via the proxy server.

9. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a text message, an account name, a unique identifier, or a combination thereof that identifies the at least one monitoring client, the one or more accessing clients, or a combination thereof at the proxy server.

10. A method of claim 1, wherein the at least one monitoring client and the one or more accessing clients are peer clients of the proxy server.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

cause, at least in part, designation of at least one monitoring client of a proxy server; and

receive an input for associating one or more accessing clients with the at least one monitoring client,

wherein the at least one monitoring client manages access to one or more resources of the proxy server by the one or more accessing clients.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

receive another input, from the at least one monitoring client, for specifying one or more access policies, one or more access lists, or a combination thereof with respect to the one or more resources.

13. An apparatus of claim 12, wherein the one or more access policies are specific to all or a subset of the one or more accessing clients.

14. An apparatus of claim 12, wherein the apparatus is further caused to:

receive a request, from the one or more accessing clients, for accessing at least one of the one or more resources;

process and/or facilitate a processing the one or more access policies, one or more default access policies, or a combination thereof to determine whether to grant or deny the request.

15. An apparatus of claim 14, wherein the apparatus is further caused to:

generate a notification to the at least one monitoring client requesting an approval for the request,

wherein the determination of whether to grant or deny the request is further based, at least in part, on the approval.

16. An apparatus of claim 11, wherein the apparatus is further caused to:

generate respective access histories for the one or more accessing clients; and

determine to provide access to the respective access histories to the at least one monitoring client via the proxy server.

17. An apparatus of claim 16, wherein the respective access histories include, at least in part, a web history, a call history, a text messaging history, a bandwidth usage history, or a combination thereof.

18. An apparatus of claim 11, wherein the apparatus is further caused to:

determine to provide access to context information associated with the one or more accessing clients to the at least one monitoring client via the proxy server.

19. An apparatus of claim 11, wherein the apparatus is further caused to:

receive a text message, an account name, a unique identifier, or a combination thereof to identify the at least one monitoring client, the one or more accessing clients, or a combination thereof at the proxy server.

20. An apparatus of claim 11, wherein the at least one monitoring client and the one or more accessing clients are peer clients of the proxy server.