Time-based Functionality Restrictions

• US 20140310771A1
• Filed: 04/13/2013
• Published: 10/16/2014
• Est. Priority Date: 04/13/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: Sky Socket Llc (Broadcom, Inc.)
• Inventors: Marshall, John, Stuntebeck, Erich
• Granted Patent: US 10,754,966 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Time-based functionality restrictions may be provided. Periodic scans may be performed to identify requests to perform functions on user devices, to determine whether the functions are compliant with compliance rules associated with the user devices that specify time periods during which the user devices are authorized to perform the functions, and to perform remedial actions if the functions are not compliant with the compliance rules.

Claims

1. A method comprising:

identifying at least one request to perform at least one function on at least one user device;

determining whether the at least one request does not comply with at least one compliance rule associated with the at least one user device, wherein the at least one compliance rule comprises at least one time period when the at least one user device is authorized to perform the at least one function; and

,

performing at least one remedial action in response to at least one determination that the at least one request does not comply with at least one of the at least one compliance rule.

2. The method of claim 1, wherein the at least one request does not comply with the at least one compliance rule if the at least one request does not comply with the at least one compliance rule at the time of the at least one request.

3. The method of claim 1, wherein performing the at least one remedial action in response to the at least one determination that the at least one request does not comply with at least one of the at least one compliance rule comprises at least one of a determination that the at least one request does not comply with a threshold number of the at least one compliance rule and a determination that the at least one request does not comply with each of the at least one compliance rule.

4. The method of claim 1, wherein the at least one remedial action comprises at least one remedial action taken with respect to the at least one user device.

5. The method of claim 1, wherein the at least one remedial action further comprises at least one of disabling at least one hardware feature of the at least one user device, disabling at least one software feature of the at least one user device, disabling at least one application of the at least one user device, erasing the contents of at least one memory location of at least one user device, restoring the at least one user device to its factory state, and queuing the at least one request to perform the at least one function on the at least one user device until the at least one request complies with the at least one compliance rule associated with the at least one user device.

6. The method of claim 5, wherein the contents of the at least one memory location of the at least one user device comprises content associated with the at least one request, content associated with the at least one function, content associated with business data, and content associated with personal data.

7. The method of claim 1, wherein the at least one remedial action comprises at least one remedial action taken with respect to at least one remote service communicatively coupled to the at least one user device.

8. The method of claim 7, wherein the at least one remedial action further comprises at least one of blocking at least one data transmission from the at least one user device to the at least one remote service, blocking at least one data transmission from the at least one remote service to the at least one user device, and erasing at least the contents of at least one memory location of the at least one remote service.

9. An apparatus comprising:

at least one memory storage; and

at least one processor coupled to the at least one memory storage, wherein the at least one processor is configured to;

identify at least one function being performed by at least one user device;

determine whether the at least one function does not comply with at least one of at least one compliance rule associated with the at least one user device, wherein the at least one compliance rule comprises at least one time period when the at least one user device is authorized to perform the at least one function; and

,

performing at least one remedial action in response to at least one determination that the at least one function does not comply with at least one of the at least one compliance rule.

10. The apparatus of claim 9, wherein the at least one user device is communicatively coupled to the apparatus.

11. The apparatus of claim 9, wherein the at least one processor is configured to identify the at least one function being performed by the at least one user device on a periodic basis.

12. The apparatus of claim 11, wherein the periodic basis comprises a configurable setting defined by at least one administrator of the apparatus.

13. The apparatus of claim 9, wherein the at least one processor is configured to identify the at least one function being performed by the at least one user device at the request of at least one administrator of the apparatus.

14. The apparatus of claim 9, wherein performing the at least one remedial action in response to the at least one determination that the at least one request does not comply with at least one of the at least one compliance rule comprises at least one of a determination that the at least one request does not comply with a threshold number of the at least one compliance rule and a determination that the at least one request does not comply with each of the at least one compliance rule.

15. The apparatus of claim 9, wherein the at least one remedial action comprises at least one of disabling at least one hardware feature of the at least one user device, disabling at least one software feature of the at least one user device, disabling at least one application of the at least one user device, erasing the contents of at least one memory location of the at least one user device associated with business data, erasing the contents of at least one memory location of the at least one user device associated with business data, restoring the at least one user device to its factory state, and queuing the at least one request to perform the at least one function on the at least one user device until the at least one request complies with the at least one compliance rule associated with the at least one user device.

16. The apparatus of claim 9, wherein the at least one remedial action comprises at least one of blocking at least one data transmission from the at least one user device to at least one remote service communicatively coupled to the at least one user device, blocking at least one data transmission from the at least one remote service to the at least one user device, and erasing at least the contents of at least one memory location of the at least one remote service.

17. A non-transitory computer-readable medium that stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

identifying at least one function of at least one user device that does not comply with at least one of at least one compliance rule associated with the at least one user device, wherein the at least one compliance rule comprises at least one time period when the at least one user device is authorized to perform the at least one function;

determining whether the noncompliant function has been previously detected; and

,

performing an escalated remedial action in response to at least one determination that the noncompliant function has been previously detected.

18. The non-transitory computer-readable medium of claim 17, wherein the escalated remedial action comprises erasing the contents of at least one memory location of the at least one user device, wherein the contents of the at least one memory location comprises business data.

19. The non-transitory computer-readable medium of claim 17, wherein the escalated remedial action comprises erasing the contents of at least one memory location of the at least one user device, wherein the contents of the at least one memory location comprises personal data.

20. The non-transitory computer-readable medium of claim 17, wherein the escalated remedial action comprises restoring the at least one user device to its factory state.