Shared resource watermarking and management

• US 9,900,261 B2
• Filed: 06/02/2013
• Issued: 02/20/2018
• Est. Priority Date: 06/02/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Marshall, John, DeWeese, William
• Primary Examiner(s): SALAD, ABDULLAHI ELMI
• Application Number:
  US13/907,932
• Publication Number:
  US 20130268677A1
• Time in Patent Office: 1,724 Days
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 43/06 Generation of reports
• CPC Class Codes: H04L 47/70 Admission control; Resource allocation
• CPC Class Codes: H04L 47/762 triggered by the network
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/52 specially adapted for the location of the user terminal
• CPC Class Codes: H04W 4/185 by embedding added-value information into content, e.g. geo-tagging

Abstract

A method, system and non-transitory computer-readable medium product are provided for shared resource watermarking and management. In the context of a method, a method is provided that includes identifying requests to share resources from a device and identifying a watermark template. The method further includes associating the watermark template with the resources, and authorizing the request to share the resources from the device.

Claims

1. A method comprising:

identifying, using a user device, a request to transmit at least one resource;

responsive to the request to transmit the at least one resource, identifying, using the user device, whether at least one compliance rule specifies that the at least one resource is required to be associated with at least one watermark template in order for the user device to be authorized to transmit the at least one resource;

responsive to identifying that the at least one compliance rule specifies that the at least one resource is required to be associated with the at least one watermark template in order for the user device to be authorized to transmit the at least one resource, identifying, using the user device, whether the at least one watermark template is associated with the at least one resource; and

responsive to identifying that the at least one watermark template is not associated with the at least one resource;

associating, using the user device, the at least one watermark template with the at least one resource; and

adding, using the user device, data describing the at least one resource to the at least one watermark template.

2. The method of claim 1, wherein the data describing the at least one resource is defined by an administrator of the at least one resource.

3. The method of claim 1, wherein the data describing the at least one resource comprises at least one sensitivity level associated with the at least one resource.

4. The method of claim 3, wherein the at least one sensitivity level associated with the at least one resource comprises an indication that the at least one resource is managed by a particular enterprise.

5. The method of claim 3, wherein the at least one sensitivity level associated with the at least one resource comprises an indication that the at least one resource is managed by a resource server communicatively coupled to the user device.

6. The method of claim 3, wherein the at least one sensitivity level associated with the at least one resource comprises an indication that the at least one resource is confidential information of a particular enterprise.

7. The method of claim 3, wherein the at least one sensitivity level associated with the at least one resource comprises an indication that the at least one resource is proprietary property of a particular enterprise.

8. The method of claim 3, wherein the at least one sensitivity level associated with the at least one resource comprises an indication that the at least one resource is protected by legal privilege.

9. The method of claim 1, wherein the data describing the at least one resource comprises at least one security requirement associated with the at least one resource.

10. The method of claim 1, further comprising:

identifying, using the user device, dynamic descriptive data describing the at least one resource; and

adding, using the user device, the dynamic descriptive data describing the at least one resource to the at least one watermark template.

11. The method of claim 10, wherein the dynamic descriptive data describing the at least one resource comprises first dynamic descriptive data describing the at least one resource in a first instance, the method further comprising:

identifying, using the user device, second dynamic descriptive data describing the at least one resource in a second instance; and

adding, using the user device, the second dynamic descriptive data describing the at least one resource in the second instance to the at least one watermark template.

12. The method of claim 10, wherein the dynamic descriptive data describing the at least one resource comprises at least one indication of whether at least one other user device that previously took action upon the at least one resource was compliant with the at least one compliance rule.

13. The method of claim 1, further comprising:

causing, using the user device, at least one event log to be created.

14. The method of claim 13, further comprising:

causing, using the user device, the at least one event log to be transmitted to at least one management service communicatively coupled to the user device.

15. The method of claim 13, the at least one event log describing an association of the at least one watermark template to the at least one resource.

16. The method of claim 13, the at least one event log describing an authorization of the request to transmit the at least one resource.

17. An apparatus comprising:

at least one processor; and

at least one memory accessible to the at least one processor, the at least one memory storing a plurality of compliance rules used to enforce a plurality of security requirements, the at least one memory further storing a plurality of program code instructions that, when executed by the at least one processor, direct the at least one processor to at least;

identify a request by the at least one processor to transmit at least one resource;

responsive to the request to transmit the at least one resource, identify whether at least one of the compliance rules specifies that the at least one resource is required to be associated with at least one watermark template in order for the at least one processor to be authorized to transmit the at least one resource;

responsive to identifying that the at least one of the compliance rules specifies that the at least one resource is required to be associated with the at least one watermark template, identify whether the at least one watermark template is associated with the at least one resource;

responsive to identifying that the at least one watermark template is not associated with the at least one resource;

associate the at least one watermark template with the at least one resource; and

add static descriptive data describing the at least one resource to the at least one watermark template.

18. The apparatus of claim 17, wherein the at least one of the compliance rules further specifies that the at least one processor is required to be communicatively coupled to a predefined access point in order for the at least one processor to be authorized to transmit the at least one resource.

19. The apparatus of claim 17, wherein the at least one of the compliance rules further specifies that the at least one processor is required to be located within a predefined geographical location in order for the at least one processor to be authorized to transmit the at least one resource.

20. A computer program product comprising a non-transitory computer-readable storage medium having a plurality of program code portions embodied therein, the program code portions being configured to upon execution, direct at least one computing device to at least:

identify a request to transmit at least one resource;

responsive to the request to transmit the at least one resource, identify whether at least one compliance rule specifies that the at least one resource is required to be associated with at least one watermark template in order for the at least one computing device to be authorized to transmit the at least one resource;

responsive to identifying that the at least one compliance rule specifies that the at least one resource is required to be associated with the at least one watermark template in order for the at least one computing device to be authorized to transmit the at least one resource, identify whether the at least one watermark template is associated with the at least one resource; and

responsive to identifying that the at least one watermark template is not associated with the at least one resource;

associate the at least one watermark template with the at least one resource; and

add static descriptive data describing the at least one resource to the at least one watermark template.