Enterprise-specific Functionality Watermarking and Management

• US 20140165161A1
• Filed: 02/17/2014
• Published: 06/12/2014
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: Sky Socket Llc (Broadcom, Inc.)
• Inventors: Marshall, John
• Granted Patent: US 9,202,025 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method, system and non-transitory computer-readable medium product are provided for enterprise-specific functionality watermarking and management. In the context of a method, a method is provided that includes identifying a request to perform at least one function of a user device associated with an enterprise and identifying at least one watermark template associated with an enterprise. The method further includes applying the at least one watermark template associated with the enterprise to at least one function of the user device associated with the enterprise and authorizing the request to perform the at least one function of the user device associated with the enterprise.

Claims

1. A method comprising:

identifying a request to perform at least one function of a user device associated with an enterprise;

identifying at least one watermark template associated with the enterprise;

applying the at least one watermark template associated with the enterprise to the at least one function of the user device associated with the enterprise; and

,

authorizing the request to perform the at least one function of the user device associated with the enterprise.

2. The method of claim 1, wherein the at least one function of the user device associated with the enterprise comprises at least one of the following:

a function of the user device configured for enterprise use, a function of the user device with access to enterprise resources, or a function of the user device executing an enterprise application.

3. The method of claim 1, wherein the watermark template is further associated with at least one user role, wherein the at least one user role comprises at least one of the following:

a job function associated with the enterprise, a functional group associated with the enterprise, or a privilege associated with the enterprise.

4. The method of claim 1, wherein applying the at least one watermark template to the at least one function of the user device comprises at least one of the following:

overlaying the at least one watermark template onto at least one graphical interface associated with the at least one function of the user device, or adding the at least one watermark template to the at least one graphical interface associated with the at least one function of the user device in at least one position within the at least one graphical interface.

5. The method of claim 1, wherein applying the at least one watermark template to the at least one function of the user device comprises at least one of the following:

overlaying the at least one watermark template onto at least one resource accessible to the at least one function of the user device, or adding the at least one watermark template to the at least one resource accessible to the at least one function of the user device in at least one position within the at least one resource.

6. The method of claim 5, wherein the at least one position within the at least one resource comprises at least one of the following:

a header of the at least one resource, a body of the at least one resource, a footer of the at least one resource, a structural metadata element of the at least one resource, a descriptive metadata element of the at least one resource, or a wrapper encapsulating the at least one resource.

7. The method of claim 5, wherein the at least one resource accessible to the at least one function of the user device comprises at least one of the following:

a resource created by the at least one function of the user device, a resource modified by the at least one function of the user device, a resource stored by the at least one function of the user device, or a resource transmitted by the at least one function of the user device.

8. The method of claim 1, wherein the watermark template comprises at least one of the following:

a property associated with the at least one function of the user device, a property associated with the user device, a property associated with a user of the user device, a property associated with the enterprise, a source identifier, a timestamp, or a location.

9. The method of claim 9, wherein the at least one property associated with the at least one function of the user device comprises at least one of the following:

a prior performance of the at least function of the user device, a sensitivity level associated with the at least one function of the user device, or a security requirement associated with the at least one function of the user device.

10. The method of claim 9, wherein the at least one property associated with the user device comprises at least one of the following:

a user device identifier, a user device hardware feature, a user device software feature, a user device application, a current time associated with said user device, a current location associated with said user device, or a home location associated with said user device.

11. The method of claim 9, wherein said property associated with the user of the user device comprises at least one of the following:

a user identifier, a user credential, a user role identifier, an enterprise identifier, a current time associated with the user, a current location associated with the at least one user of the user device, or a home location associated with the at least one user of the user device.

12. An apparatus comprising:

at least one processor; and

,

at least one memory having program code instructions embodied therein, the at least one memory and program code instructions being configured to, with the at least one processor, direct the apparatus to at least;

identify a request to perform at least one function of a user device associated with an enterprise;

identify at least one watermark template associated with the enterprise;

apply the at least one watermark template associated with the enterprise to the at least one function of the user device associated with the enterprise; and

,

authorize the request to perform the at least one function of the user device associated with the enterprise.

13. The apparatus of claim 12, wherein authorizing the request to perform the at least one function of the user device comprises at least one of the following:

instructing the user device that the request is authorized, instructing the user device to perform the requested at least one function, or permitting the user device to perform the at least one function without interference.

14. The apparatus of claim 12, wherein authorizing the request to perform the at least one function of the user device comprises authorizing the request to perform the at least one function of the user device while the at least one watermark template is applied to the at least one function of the user device.

15. A computer program product comprising a non-transitory computer-readable storage medium having program code portions embodied therein, the program code portions being configured to, upon execution, direct an apparatus to at least:

identify a request to perform at least one function of a user device associated with an enterprise;

identify at least one watermark template associated with the enterprise;

apply the at least one watermark template associated with the enterprise to the at least one function of the user device associated with the enterprise; and

,

authorize the request to perform the at least one function of the user device associated with the enterprise.

16. The computer program product of claim 16, wherein the apparatus is further directed to deny the request to perform the at least one function of the user device in response to a determination that the user device does not comply with at least one compliance rule.

18. The computer program product of claim 16, wherein the apparatus is further directed to create an event log, wherein the event log comprises at least one property associated with at least one of the following:

the application of the at least one watermark template to the at least one function of the user device, or the authorization of the request to perform the at least one function of the user device.

19. The computer program product of claim 16, wherein the apparatus is further directed to transmit an event log to a service communicatively coupled to the user device, wherein the event log comprises at least one property associated with at least one of the following:

the application of the at least one watermark template to the at least one function of the user device, or the authorization of the request to perform the at least one function of the user device.

17. The computer program product of claim 17, wherein denying the request to perform the at least one function of the user device comprises at least one of the following:

instructing the user device that the request is not authorized, instructing the user device not to perform the requested at least one function, or preventing the user device from performing the at least one function of the user device.