IP Library Granted Patent US 9,246,918
Granted Patent B2
US 9,246,918 · App. 13/891,551 · Granted Jan 26, 2016

Secure application leveraging of web filter proxy services

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,246,918
App. No.
13/891,551
Granted
Jan 26, 2016
Kind
B2
Abstract

Secure application leveraging of a filter proxy service may be provided. In response to receiving a request to access a resource, a filter proxy service may be used to determine whether the request to access the resource is approved. If the request to access the resource is approved, the access to the resource may be allowed to continue.

Claims (41)

1. A method for controlling access of client devices enrolled in a management system, comprising:

receiving, from a secure application executing on a client device, a first request to access a resource, the secure application being provisioned as part of the management system separately from a client application;

in response to the first request, transmitting, from the client device, a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;

obtaining, in the client device, the indication that the aggregate result determines that the resource complies with the acceptable use policy; and

in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, granting, in the client device, the first request to access the resource.

2. The method of claim 1 , wherein the resource comprises at least one of a database, a document, a web page, a software resource, a hardware resource, a file, a message, or an application.

3. The method of claim 1 , wherein the first request is received using a management application in the client device.

4. The method of claim 1 , wherein granting the first request to access to the resource comprises allowing the secured application to cause the client device to request the resource.

5. The method of claim 1 , further comprising causing, using the client device, the indication that the resource complies with the acceptable use policy to be cached.

6. The method of claim 1 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a majority of the plurality of filter proxy services determined that the resource complies with the acceptable use policy.

7. The method of claim 1 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a weighted combination of the filter proxy services determined that the resource complies with the acceptable use policy.

8. The method of claim 1 , further comprising:

providing, to the client device, an agent application in addition to the secure application, wherein the agent application:

monitors requests to access resources; and

determines whether the requests should be approved based on one or more compliance rules that specify acceptable device characteristics.

9. A system for controlling access of client devices enrolled in a management system comprising:

a client device comprising a processor; and

a memory storage that is accessible to the processor, wherein the memory storage comprises a plurality of program instructions that, upon execution by the processor, cause the processor to at least:

receive, from a secure application, a first request to access a resource, the secure application being provisioned as part of the management system separately from a client application;

in response to the first request, transmit a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;

obtain the indication that the aggregate result determines that the resource complies with the acceptable use policy; and

in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, grant the first request to access the resource.

10. The system of claim 9 , wherein at least one of the plurality of filter proxy services comprises a third party service relative to at least one party that operates the client device and the client device.

11. The system of claim 9 , wherein the plurality of program instructions, upon execution by the processor, further cause the processor to at least initiate an application programming interface (API) call associated with the filter proxy service.

12. The system of claim 9 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a majority of the plurality of filter proxy services determined that the resource complies with the acceptable use policy.

13. The system of claim 9 , wherein the memory storage further comprises a plurality of program instructions that, upon execution by the processor, cause the processor to at least:

provide, to the client device, an agent application in addition to the secure application, wherein the agent application authorizes a user of the client device to access the resource based on biometric data.

14. A non-transitory computer-readable medium that stores a set of instructions that, when executed by a processor, cause the processor to perform a method for controlling access of client devices enrolled in a management system, comprising:

receiving, from a secure application, a first request to access a resource, the secure application being provisioned as part of the management system;

in response to the first request, transmitting a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;

obtaining the indication that the aggregate result determines that the resource complies with the acceptable use policy; and

in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, granting the first request to access the resource.

15. The non-transitory computer-readable medium of claim 14 , wherein the indication comprises a prior response associated with the resource that is cached.

16. The non-transitory computer-readable medium of claim 14 , wherein the resource comprises a database.

17. The non-transitory computer-readable medium of claim 14 , wherein the resource comprises a hardware resource.

18. The non-transitory computer-readable medium of claim 14 , wherein granting the first request to access the resource comprises allowing the secured application to cause the processor to request the resource.

19. The non-transitory computer-readable medium of claim 14 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a weighted combination of the filter proxy services determined that the resource complies with the acceptable use policy.

20. The computer-readable medium of claim 14 , wherein the instructions, when executed, cause the process to perform additional steps comprising:

receiving the second request using a management application; and

communicating, by the management application, with the plurality of filter proxy services to determine whether the resource complies with the acceptable use policy, wherein the client device would be unable to independently communicate with each of the filter proxy services; and

calculating, by the management application based on the responses from the plurality of filter proxy services, the aggregate result.

Assignments (4)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: AIRWATCH LLC
To: OMNISSA, LLC
Reel/Frame 068327/0670 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jun 25, 2024
From: MARSHALL, JOHN; STUNTEBECK, ERICH; SORENSEN, BLAKE
To: SKYSOCKET, LLC
Reel/Frame 067834/0496 →
MERGER Recorded Jul 21, 2014
From: SKY SOCKET, LLC
To: AIRWATCH LLC
Reel/Frame 033369/0291 →