Multidimensional risk profiling for network access control of mobile devices through a cloud based security system

1. A server configured to profile a mobile device for a cloud-based system, the server comprising:

a network interface, a data store, and a processor communicatively coupled to one another; and

memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to

based on communication to a client application on the mobile device, cause the client application to collect data associated with the mobile device, wherein the collected data includes any of device information, security telemetry, operating system upgrades, geolocation changes, application changes, anti-virus status, device configuration, and combinations thereof;

receive the collected data; and

determine a device fingerprint and a risk index for the mobile device based on the collected data, wherein the device fingerprint is utilized to uniquely identify the mobile device and the risk index is utilized to manage the mobile device.

2. The server of claim 1 , wherein the cloud-based system utilizes the device fingerprint to authorize a user and for tracking the user in all network access attempts.

3. The server of claim 1 , wherein the device fingerprint is a combination of posture information from the collected data and is represent as a hash of the posture information.

4. The server of claim 1 , wherein the risk index is utilized for access to or through the cloud-based system.

5. The server of claim 1 , wherein the risk index is based on a combination of user browsing pattern, device risk, application risk, resource risk, user risk, and environment risk.

6. The server of claim 1 , wherein the risk index is continually updated.

7. The server of claim 1 , wherein the memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to

one of allow, quarantine, or deny a user request to resources in or through the cloud-based system based on the risk index.

8. A mobile device comprising:

a network interface, a data store, and a processor communicatively coupled to one another; and

memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to

execute a client application that communicates to a cloud-based system;

collect data associated with the mobile device via the client application, wherein the collected data includes any of device information, security telemetry, operating system upgrades, geolocation changes, application changes, anti-virus status, device configuration, and combinations thereof; and

transmit the collected data to the cloud-based system, for a determination of a device fingerprint and a risk index for the mobile device based on the collected data, wherein the device fingerprint is utilized to uniquely identify the mobile device and the risk index is utilized to manage the mobile device.

9. The mobile device of claim 8 , wherein the cloud-based system utilizes the device fingerprint to authorize a user and for tracking the user in all network access attempts.

10. The mobile device of claim 8 , wherein the device fingerprint is a combination of posture information from the collected data and is represent as a hash of the posture information.

11. The mobile device of claim 8 , wherein the risk index is utilized for access to or through the cloud-based system.

12. The mobile device of claim 8 , wherein the risk index is based on a combination of user browsing pattern, device risk, application risk, resource risk, user risk, and environment risk.

13. The mobile device of claim 8 , wherein the risk index is continually updated.

14. The mobile device of claim 8 , wherein the memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to

provide a user request to resources in or through the cloud-based system, wherein the user request is one of allowed, quarantined, or denied by the cloud-based system based on the risk index.

15. A non-transitory computer-readable medium comprising computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to

based on communication to a client application on the mobile device, cause the client application to collect data associated with the mobile device, wherein the collected data includes any of device information, security telemetry, operating system upgrades, geolocation changes, application changes, anti-virus status, device configuration, and combinations thereof;

receive the collected data; and

determine a device fingerprint and a risk index for the mobile device based on the collected data, wherein the device fingerprint is utilized to uniquely identify the mobile device and the risk index is utilized to manage the mobile device.

16. The non-transitory computer-readable medium of claim 15 , wherein the risk index is utilized for access to or through the cloud-based system.

17. The non-transitory computer-readable medium of claim 15 , wherein, in response to execution by the processor, the computer-executable instructions cause the processor to

one of allow, quarantine, or deny a user request to resources in or through the cloud-based system based on the risk index.