Enterprise-specific functionality watermarking and management

• US 9,202,025 B2
• Filed: 02/17/2014
• Issued: 12/01/2015
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Marshall, John
• Primary Examiner(s): Chai, Longbit
• Application Number:
  US14/181,993
• Publication Number:
  US 20140165161A1
• Time in Patent Office: 652 Days
• Field of Search: 713/176
• US Class Current: 1/1
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 2463/121 Timestamp cryptographic mechanisms or cryptographic arrangements involving time stamps H04L9/3297
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method, system and non-transitory computer-readable medium product are provided for enterprise-specific functionality watermarking and management. In the context of a method, a method is provided that includes identifying a request to perform at least one function of a user device associated with an enterprise and identifying at least one watermark template associated with an enterprise. The method further includes applying the at least one watermark template associated with the enterprise to at least one function of the user device associated with the enterprise and authorizing the request to perform the at least one function of the user device associated with the enterprise.

Claims

1. A non-transitory computer-readable medium embodying a program executable in a client device, comprising code that:

identifies a request to perform an enterprise function of the client device, the enterprise function being associated with a compliance rule;

communicates the request to a compliance server over a network to identify at least one watermark template from a plurality of available watermark templates based at least in part on the enterprise function of the client device requested to be performed, the at least one watermark template identified by querying a data store accessible by the compliance server;

applies the at least one watermark template to the enterprise function of the client device such that a performance of the enterprise function complies with the compliance rule by;

causing descriptive data to be added to the at least one watermark template, the descriptive data being descriptive of the enterprise function of the client device requested to be performed;

overlaying the at least one watermark template onto a resource generated by the enterprise function of the client device; and

storing the resource in accordance with a storage structure convention defined by configuration data of the watermark template; and

receives an authorization from the compliance server that causes the client device to perform the enterprise function identified in the request, the authorization being determined using at least a property set forth in the at least one watermark template that indicates whether the client device complies with the compliance rule.

2. The non-transitory computer-readable medium of claim 1, wherein the code that applies the at least one watermark template to the enterprise function of the client device further comprises code that applies the at least one watermark template to a resource that is created, modified, stored, or transmitted by the enterprise function of the client device.

3. The non-transitory computer-readable medium of claim 1, wherein the enterprise function of the client device further comprises a function of the client device that configures the client device for an enterprise use, accesses enterprise data, or executes an enterprise application.

4. The non-transitory computer-readable medium of claim 1, wherein the code that applies the at least one watermark template to the enterprise function of the client device further comprises code that:

overlays the at least one watermark template onto a graphical interface associated with the enterprise function of the client device;

or

adds the at least one watermark template to the graphical interface associated with the enterprise function of the client device in at least one position within the graphical interface.

5. The non-transitory computer-readable medium of claim 1, wherein the code that applies the at least one watermark template to the enterprise function of the client device further comprises code that:

adds the at least one watermark template to the resource generated by the enterprise function of the client device in a position within the resource.

6. The non-transitory computer-readable medium of claim 5, wherein the position within the resource is selected from a group consisting of:

a header of the resource, a body of the resource, a footer of the resource, a structural metadata element of the resource, a descriptive metadata element of the resource, and a wrapper encapsulating the resource.

7. The non-transitory computer-readable medium of claim 1, wherein the property set forth in the at least one watermark template that indicates whether the client device complies with the compliance rule further comprises a particular property associated with the enterprise function, the client device, a user of the client device, an enterprise, a source identifier, a timestamp, or a location.

8. A system, comprising:

a user device comprising a local data store; and

program code executed in the user device that causes the user device to at least;

identify a request to perform an enterprise function of the user device, the enterprise function being associated with a compliance rule;

communicates the request to a remote server over a network to identify at least one watermark template from a plurality of available watermark templates based at least in part on the enterprise function of the user device requested to be performed, the at least one watermark template identified by querying a data store accessible by the remote server;

apply the at least one watermark template to the enterprise function of the user device such that a performance of the enterprise function complies with the compliance rule by;

causing descriptive data to be added to the at least one particular watermark template, the descriptive data being descriptive of the enterprise function of the user device requested to be performed;

overlaying the at least one watermark template onto a resource generated by the enterprise function of the client device; and

storing the resource in accordance with a storage structure convention defined by configuration data of the watermark template; and

locally authorize the user device to perform the enterprise function identified in the request using at least a property of the user device set forth in the watermark template, the property indicating whether the user device complies with the compliance rule.

9. The system of claim 8, wherein the program code that causes the user device to apply the at least one watermark template to the enterprise function of the user device further comprises program code that causes the user device to apply the at least one watermark template to the resource that is created, modified, stored, or transmitted by the enterprise function of the user device.

10. The system of claim 8, wherein the enterprise function of the user device further comprises a function of the user device that configures the user device for an enterprise use, accesses enterprise data, or executes an enterprise application.

11. The system of claim 8, wherein the program code that causes the user device to apply the at least one watermark template to the enterprise function of the user device further comprises program code that causes the user device to at least:

overlay the at least one watermark template onto a graphical interface associated with the enterprise function of the user device;

or

add the at least one watermark template to the graphical interface associated with the enterprise function of the user device in at least one position within the graphical interface.

12. The system of claim 8, wherein the program code that causes the user device to apply the at least one watermark template to the enterprise function of the user device further comprises program code that causes the user device to at least:

add the at least one watermark template to the resource generated by the enterprise function of the user device in a position within the resource.

13. The system of claim 12, wherein the position within the resource is selected from a group consisting of:

a header of the resource, a body of the resource, a footer of the resource, a structural metadata element of the resource, a descriptive metadata element of the resource, and a wrapper encapsulating the resource.

14. The system of claim 8, wherein the property set forth in the at least one watermark template that indicates whether the user device complies with the compliance rule further comprises a particular property associated with the enterprise function, the user device, a user of the user device, an enterprise, a source identifier, a timestamp, or a location.

15. A method, comprising:

identifying, by a client device, a request to perform an enterprise function of the client device, the enterprise function being associated with a compliance rule, wherein the client device comprises processing circuitry;

querying, by the client device, a local data store to identify at least one watermark template from a plurality of available watermark templates based at least in part on the enterprise function of the client device requested to be performed;

applying, by the client device, the at least one watermark template to the enterprise function of the client device such that a performance of the enterprise function complies with the compliance rule by;

causing descriptive data to be added to the at least one watermark template, the descriptive data being descriptive of the enterprise function of the client device requested to be performed; and

overlaying the at least one watermark template onto a resource generated by the enterprise function of the client device; and

storing the resource in accordance with a storage structure convention defined by configuration data of the watermark template; and

authorizing, by the client device, the performance of the enterprise function identified in the request using at least a property of the client device set forth in the watermark template, the property indicating whether the client device complies with the compliance rule.

16. The method of claim 15, wherein applying, by the client device, the at least one watermark template to the enterprise function of the client device further comprises applying, by the client device, the at least one watermark template to the resource that is created, modified, stored, or transmitted by the enterprise function of the client device.

17. The method of claim 15, wherein the enterprise function of the client device further comprises a function of the client device that configures the client device for an enterprise use, accesses enterprise data, or executes an enterprise application.

18. The method of claim 15, wherein applying, by the client device, the at least one watermark template to the enterprise function of the client device further comprises:

overlaying, by the client device, the at least one watermark template onto a graphical interface associated with the enterprise function of the client device;

or

adding, by the client device, the at least one watermark template to the graphical interface associated with the enterprise function of the client device in at least one position within the graphical interface.

19. The method of claim 15, wherein applying, by the client device, the at least one watermark template to the enterprise function of the client device further comprises:

adding, by the client device, the at least one watermark template to the resource generated by the enterprise function of the client device in a position within the resource.

20. The method of claim 15, wherein the property set forth in the at least one watermark template that indicates whether the client device complies with the compliance rule further comprises a particular property associated with the enterprise function, the client device, a user of the client device, an enterprise, a source identifier, a timestamp, or a location.