Managed real-time communications between user devices
Managed real-time communications between user devices may be provided. Upon receiving a request to instantiate a communication connection from an application, a secure session may be established between the application and a remote application. Input from a user of the application may be received, subjected to at least one management policy, and transmitted to the remote application.
1. A method comprising:
receiving a request to initiate a messaging connection from a messaging application executed on a client device;
determining whether the request is in compliance with at least one management policy, wherein the at least one management policy specifies that the messaging connection must be created using a particular application;
determining whether a device associated with the request is in compliance with at least one second management policy, wherein the at least one second management policy specifies at least one compliance restriction based on properties of the client device; and
in response to determining that the request is not in compliance with the at least one management policy or the device is not in compliance with the at least one second management policy, applying a remediation action to at least one of the device or the request.
2. The method of claim 1 , wherein the request comprises at least one of: a request to report in to a monitoring server or a user input associated with the messaging application.
3. The method of claim 1 , wherein the at least one management policy specifies at least one of: that a minimum encryption level be applied to the messaging connection, that a particular encryption key be employed to encrypt the messaging connection, or that a restriction based upon network conditions associated with the messaging connection.
4. The method of claim 1 , wherein the remediation action comprises restricting the request from being transmitted to at least one of a second application or a remotely located server.
5. The method of claim 1 , wherein the remediation action comprises:
applying or modifying a security level associated with the request; and
transmitting the request with the security level applied to the request.
6. The method of claim 5 , wherein applying or modifying the security level associated with the request comprises applying at least one of: an encryption algorithm, an encryption level, an encryption key size, a communication protocol, a communication type limitation, a permitted user limitation, a permitted recipient limitation, a communication protocol, a package size, or a compression algorithm.
7. The method of claim 5 , wherein applying or modifying the security level associated with the request comprises obfuscating message contents associated with the request.
8. The method of claim 1 , wherein the at least one second management policy comprises at least one of: a requirement that the device have a passcode enabled, a time restriction, a location restriction, or a requirement that the device be enrolled with a management system.
9. A system comprising:
a computing device; and
an application executable by the computing device, the application configured to cause the computing device to at least:
receive a request to initiate a messaging connection from a messaging application executed on the computing device;
determine whether the request is in compliance with at least one management policy, wherein the at least one management policy specifies that the messaging connection must be created using a particular application;
determine whether a device associated with the request is in compliance with at least one second management policy, wherein the at least one second management policy specifies at least one compliance restriction based on properties of the computing device; and
in response to a determination that the request is not in compliance with the at least one management policy or the device is not in compliance with the at least one second management policy, apply a remediation action to at least one of the device or the request.
10. The system of claim 9 , wherein the request comprises at least one of a request to report in to a monitoring server or a user input associated with the messaging application.
11. The system of claim 9 , wherein the at least one management policy specifies at least one of: that a minimum encryption level be applied to the messaging connection, that a particular encryption key be employed to encrypt the messaging connection, or that a restriction based upon network conditions associated with the messaging connection.
12. The system of claim 9 , wherein the remediation action comprises:
applying or modifying a security level associated with the request; and
transmitting the request with the security level applied to the request.
13. The system of claim 12 , wherein applying or modifying the security level associated with the request comprises applying at least one of: an encryption algorithm, an encryption level, an encryption key size, a communication protocol, a communication type limitation, a permitted user limitation, a permitted recipient limitation, a communication protocol, a package size, or a compression algorithm.
14. The system of claim 9 , wherein the at least one second management policy comprises at least one of: a requirement that the device have a passcode enabled, a time restriction, a location restriction, or a requirement that the device be enrolled with a management system.
15. A non-transitory computer-readable medium comprising an application, the application, when executed, causing a computing device to at least:
receive a request to initiate a messaging connection from a messaging application executed on the computing device;
determine whether the request is in compliance with at least one management policy, wherein the at least one management policy specifies that the messaging connection must be created using a particular application;
determine whether a device associated with the request is in compliance with at least one second management policy, wherein the at least one second management policy specifies at least one compliance restriction based on properties of the computing device; and
in response to a determination that the request is not in compliance with the at least one management policy or the device is not in compliance with the at least one second management policy, apply a remediation action to at least one of the device or the request.
16. The non-transitory computer-readable medium of claim 15 , wherein the request comprises at least one of a request to report in to a monitoring server or a user input associated with the messaging application.
17. The non-transitory computer-readable medium of claim 15 , wherein the at least one management policy specifies at least one of: that a minimum encryption level be applied to the messaging connection, that a particular encryption key be employed to encrypt the messaging connection, or that a restriction based upon network conditions associated with the messaging connection.
18. The non-transitory computer-readable medium of claim 15 , wherein the remediation action comprises restricting the request from being transmitted to at least one of a second application or a remotely located server.
19. The non-transitory computer-readable medium of claim 15 , wherein the remediation action comprises:
applying or modifying a security level associated with the request; and
transmitting the request with the security level applied to the request.
20. The non-transitory computer-readable medium of claim 19 , wherein the at least one second management policy comprises at least one of: a requirement that the device have a passcode enabled, a time restriction, a location restriction, or a requirement that the device be enrolled with a management system.