Enterprise-specific functionality watermarking and management

• US 8,775,815 B2
• Filed: 07/03/2013
• Issued: 07/08/2014
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: Sky Socket Llc (Broadcom, Inc.)
• Inventors: Marshall, John
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US13/935,430
• Publication Number:
  US 20140026195A1
• Time in Patent Office: 370 Days
• Field of Search: 713/176
• US Class Current: 713/176
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method, system and non-transitory computer-readable medium product are provided for enterprise-specific functionality watermarking and management. In the context of a method, a method is provided that includes identifying a request to perform at least one function of a user device associated with an enterprise and identifying at least one watermark template associated with an enterprise. The method further includes applying the at least one watermark template associated with the enterprise to at least one function of the user device associated with the enterprise and authorizing the request to perform the at least one function of the user device associated with the enterprise.

Claims

1. A method comprising:

identifying, by a computing device, a request to perform an enterprise function of a user device, the enterprise function of the user device comprising a function of the user device configured to access at least one resource associated with a particular enterprise;

identifying, based at least in part on the particular enterprise, at least one particular watermark template from a plurality of watermark templates;

populating the at least one particular watermark template by at least;

causing descriptive data to be added to the at least one particular watermark template, the descriptive data comprising at least one property associated with the particular enterprise, and

causing configuration data to be added to the particular watermark template, the configuration data comprising at least a storage structure convention, the storage structure convention specifying at least one particular storage location where at least one resource accessible to the enterprise function of the user device must be stored;

applying the populated at least one particular watermark template to the enterprise function of the user device by causing at least a portion of the populated at least one particular watermark template to be overlaid onto at least one graphical interface associated with the enterprise function of the user device; and

,

applying the populated at least one particular watermark template to the at least one resource accessible to the enterprise function of the user device by causing the at least one resource accessible to the enterprise function of the user device to be stored in accordance with the storage structure convention.

2. The method of claim 1, wherein the storage structure convention further specifies at least one digital rights management file format in which the at least one resource accessible to the enterprise function of the user device must be formatted.

3. The method of claim 1, wherein the storage structure convention further specifies at least one encryption protocol in which the at least one resource accessible to the enterprise function of the user device must be encrypted.

4. The method of claim 1, wherein the storage structure convention further specifies at least one file size limitation within which the at least one resource accessible to the enterprise function must be sized.

5. The method of claim 1, wherein the configuration data further comprises a naming convention.

6. The method of claim 5, wherein the populated at least one particular watermark template is further applied to the at least one resource accessible to the enterprise function of the user device by causing the at least one resource accessible to the enterprise function of the user device to be named in accordance with the naming convention.

7. The method of claim 1, wherein the at least one resource associated with the particular enterprise comprises a resource managed via a management service associated with the particular enterprise.

8. The method of claim 1, wherein the at least one resource associated with the particular enterprise comprises a resource stored on a resource server associated with the particular enterprise.

9. The method of claim 1, further comprising:

causing at least one event log to be created, the at least one event log describing an application of the populated at least one particular watermark template.

10. The method of claim 9, further comprising:

causing the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

11. The method of claim 1, further comprising:

causing the request to perform the enterprise function of the user device to be authorized in an instance in which the user device complies with at least one compliance rule associated with the enterprise function of the user device.

12. The method of claim 11, further comprising:

causing at least one event log to be created, the at least one event log describing an authorization of the request to perform the enterprise function of the user device.

13. The method of claim 12, further comprising:

causing the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

14. The method of claim 1, further comprising:

causing the request to perform the enterprise function of the user device to be denied in an instance in which the user device does not comply with at least one compliance rule associated with the enterprise function of the user device.

15. The method of claim 14, further comprising:

causing at least one event log to be created, the at least one event log describing a denial of the request to perform the enterprise function of the user device.

16. The method of claim 15, further comprising:

causing the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

24. The apparatus of claim 1, wherein the at least one resource associated with the particular enterprise comprises a resource stored on a resource server associated with the particular enterprise.

17. An apparatus comprising:

at least one processor; and

,

at least one memory storing program code instructions, the at least one memory and the program code instructions being configured to, with the at least one processor, direct the apparatus to at least;

identify a request to perform an enterprise function of a user device, the enterprise function of the user device comprising a function of the user device configured to access at least one resource associated with a particular enterprise;

identify, based at least in part on the particular enterprise, at least one particular watermark template form a plurality of watermark templates;

populate the at least one particular watermark template by at least;

causing descriptive data to be added to the at least one particular watermark template, the descriptive data comprising at least one property associated with the particular enterprise, and

causing configuration data to be added to the particular watermark template, the configuration data comprising at least a storage structure convention, the storage structure convention specifying at least one particular storage location where the at least one resource accessible to the enterprise function of the user device must be stored;

apply the populated at least one particular watermark template to the enterprise function of the user device by causing at least a portion of the populated at least one particular watermark template to be overlaid onto at least one graphical interface associated with the enterprise function of the user device; and

,

apply the populated at least one particular watermark template to the at least one resource accessible to the enterprise function of the user device by causing the at least one resource accessible to the enterprise function of the user device to be store in accordance with the storage structure convention.

18. The apparatus of claim 17, wherein the storage structure convention further specifies at least one digital rights management file format in which the at least one resource accessible to the enterprise function of the user device must be formatted.

19. The apparatus of claim 17, wherein the storage structure convention further specifies at least one encryption protocol in which the at least one resource accessible to the enterprise function of the user device must be encrypted.

20. The apparatus of claim 17, wherein the storage structure convention further specifies at least one file size limitation within which the at least one resource accessible to the enterprise function must be sized.

21. The apparatus of claim 17, wherein the configuration data further comprises a naming convention.

22. The apparatus of claim 21, wherein the populated at least one particular watermark template is further applied to the at least one resource accessible to the enterprise function of the user device by causing the at least one resource accessible to the enterprise function of the user device to be named in accordance with the naming convention.

23. The apparatus of claim 17, wherein the at least one resource associated with the particular enterprise comprises a resource managed via a management service associated with the particular enterprise.

25. The apparatus of claim 17, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing an application of the populated at least one particular watermark template.

26. The apparatus of claim 25, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

27. The apparatus of claim 17, wherein the apparatus is further directed to at least:

cause the request to perform the enterprise function of the user device to be authorized in instance in which the user device complies with at least one compliance rule associated with the enterprise function of the user device.

28. The apparatus of claim 27, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing an authorization of the request to perform the enterprise function of the user device.

29. The apparatus of claim 28, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

30. The apparatus of claim 17, wherein the apparatus is further directed to at least:

cause the request to perform the enterprise function of the user device to be denied in an instance in which the user device does not comply with at least one compliance rule associated with the enterprise function of the user device.

31. The apparatus of claim 30, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing a denial of the request to perform the enterprise function of the user device.

32. The apparatus of claim 31, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

33. A computer program product comprising a non-transitory computer-readable storage medium having program code portions embodied therein, the program code portions being configured to, upon execution, direct an apparatus to at least:

identify a request to perform an enterprise function of a user device, the enterprise function of the user device comprising a function of the user device configured to access at least one resource associated with a particular enterprise;

identify, based at least in part on the particular enterprise, at least one particular watermark template from a plurality of watermark templates;

populate the at least one particular watermark template by at least;

causing descriptive data to be added to the at least one particular watermark template, the descriptive data comprising at least one property associated with the particular enterprise, and

causing configuration data to be added to the particular watermark template, the configuration data comprising a least a storage structure convention, the storage structure convention specifying at least one particular storage location where at least one resource accessible to the enterprise function of the user device must be stored;

apply the populated at least one particular watermark to the enterprise function of the user device by causing at least a portion of the populated at least one particular watermark template to be overlaid onto at least one graphical interface associated with the enterprise function of the user device; and

,

apply the populated at least one particular watermark template to the at least one resource accessible to the enterprise function of the user device by causing the at least one resources accessible to the enterprise function of the user device to be stored in accordance with the storage structure convention.

34. The computer program product of claim 33, wherein the storage structure convention further specifies at least one digital rights management file format in which the at least one resource accessible to the enterprise function of the user device must be formatted.

35. The computer program product of claim 33, wherein the storage structure convention further specifies at least one encryption protocol in which the at least one resource accessible to the enterprise function of the user device must be encrypted.

36. The computer program product of claim 33, wherein the storage structure convention further specifies at least one file size limitation within which the at least one resource accessible to the enterprise function must be sized.

37. The computer program product of claim 33, wherein the configuration data further comprises a naming convention.

38. The computer program product of claim 37, wherein the populated at least one particular watermark template is further applied to the at least one resource accessible to the enterprise function of the user device by causing the at least one resource accessible to the enterprise function of the user device to be named in accordance with the naming convention.

39. The computer program product of claim 33, wherein the at least one resource associated with the particular enterprise comprises a resource managed via a management service associated with the particular enterprise.

40. The computer program product of claim 33, wherein the at least one resource associated with the particular enterprise comprises a resource stored on a resource server associated with the particular enterprise.

41. The computer program product of claim 33, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing an application of the populated at least one particular watermark template.

42. The computer program product of claim 41, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

43. The computer program product of claim 33, wherein the apparatus is further directed to at least:

cause the request to perform the enterprise function of the user device to be authorized in an instance in which the user device complies with at least one compliance rule associated with the enterprise function of the user device.

44. The computer program product of claim 43, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing an authorization of the request to perform the enterprise function of the user device.

45. The computer program product of claim 44, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

46. The computer program product of claim 33, wherein the apparatus is further directed to at least:

cause the request to perform the enterprise function of the user device to be denied in an instance in which the user device does not comply with at least one compliance rule associated with the enterprise function of the user device.

47. The computer program product of claim 46, wherein the apparatus is further directed to at least:

cause at least one event log to be created, the at least one event log describing a denial of the request to perform the enterprise function of the user device.

48. The computer program product of claim 47, wherein the apparatus is further directed to at least:

cause the created at least one event log to be transmitted to at least one management service communicatively coupled to the user device.