Rights management services integration with mobile device management

• US 9,516,066 B2
• Filed: 06/04/2015
• Issued: 12/06/2016
• Est. Priority Date: 05/16/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Brannon, Jonathan Blake, Sorensen, Christian Blake
• Primary Examiner(s): Song, Hosuk
• Application Number:
  US14/730,844
• Publication Number:
  US 20150304358A1
• Time in Patent Office: 551 Days
• Field of Search: 726/1, 726 26- 33, 713165-167, 713/189, 713/193
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/71 Hardware identity

Abstract

Rights management services (RMS) integration with mobile device management (MDM) may be provided. A functionality associated with a document may be restricted according to a document management policy. After the document has been transmitted to a receiving device, a request to un-restrict the at least one functionality associated with the document may be received. If it is determined that the receiving device complies with the document management policy, the functionality associated with the document may be un-restricted.

Claims

1. A method comprising:

generating a restriction on a functionality of a document associated with a sender device, the document being restricted according to a compliance policy;

transmitting the document to a recipient device;

receiving, in a rights management server, a request to remove the restriction associated with the document, the request being associated with viewing of the document by the recipient device;

determining, in the rights management server, whether the recipient device complies with the compliance policy based upon a compliance indication received from a compliance server associated with the recipient device; and

transmitting, from the rights management server, an approval to remove the restriction in response to a determination that the recipient device complies with the compliance policy.

2. The method of claim 1, wherein the approval to remove the restriction is transmitted to an application executed by the recipient device.

3. The method of claim 1, wherein the restriction comprises an encryption algorithm applied to the document.

4. The method of claim 3, wherein the approval comprises a decryption key provided by the rights management server, the decryption key being used by the recipient device to decrypt the document.

5. The method of claim 1, wherein the document comprises at least one of:

an e-mail message, a text message, a word processing document, a spreadsheet, a presentation, an instant message, a binary file, an audio file, a video file, a voicemail, or a contact information document.

6. The method of claim 1, wherein the compliance policy and the sender device are associated with a first organization.

7. The method of claim 6, wherein the recipient device is associated with a second organization.

8. The method of claim 1, wherein the functionality comprises at least one of:

opening the document, forwarding the document, modifying the document, saving the document, deleting the document, opening the document, or sharing the document.

9. A system, comprising:

a computing device; and

a rights management server executable by the computing device, wherein the rights management server, when executed by the computing device, is configured to cause the computing device to at least;

generate a restriction on a functionality of a document associated with a sender device, the document being restricted according to a compliance policy;

transmit the document to a recipient device;

receive a request to remove the restriction associated with the document, the request being associated with viewing of the document by the recipient device;

determine whether the recipient device complies with the compliance policy based upon a compliance indication received from a compliance server associated with the recipient device; and

transmit an approval to remove the restriction in response to a determination that the recipient device complies with the compliance policy.

10. The system of claim 9, wherein the approval to remove the restriction is transmitted to an application executed by the recipient device.

11. The system of claim 9, wherein the restriction comprises an encryption algorithm applied to the document.

12. The system of claim 11, wherein the approval comprises a decryption key provided by the rights management server, the decryption key being used by the recipient device to decrypt the document.

13. The system of claim 9, wherein the document comprises at least one of:

an e-mail message, a text message, a word processing document, a spreadsheet, a presentation, an instant message, a binary file, an audio file, a video file, a voicemail, or a contact information document.

14. The system of claim 9, wherein the compliance policy and the sender device are associated with a first organization.

15. The system of claim 14, wherein the recipient device is associated with a second organization.

16. The system of claim 9, wherein the functionality comprises at least one of:

opening the document, forwarding the document, modifying the document, saving the document, deleting the document, opening the document, or sharing the document.