IP Library Granted Patent US 11,736,529
Granted Patent B2
US 11,736,529 · App. 17/331,709 · Granted Aug 22, 2023

Adaptive offline policy enforcement based on coniext

Inventors: Eugene Liderman (Olney, MD); Stephen Turner (Atlanta, GA); Simon Brooks (Palo Alto, CA)
Assignee: VMware, Inc.
H04L63/20G06F21/629H04L63/0838H04L63/0861H04W12/63
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,736,529
App. No.
17/331,709
Granted
Aug 22, 2023
Kind
B2
Abstract

Disclosed are various examples that relate to adjusting a stringency of offline policy restrictions based on a situational context of a computing device. In one example, a system can receive an offline restriction policy for an application. The system can identify a request to execute an application during the offline period of time. A situational context of the computing device can be determined. A first application restriction can be enforced for the application on the computing device based on the identification of the computing device being in the offline period of time and the situational context. A change in the situational context of the computing device can be identified during the offline period of time based on a detection of a second condition. A second application restriction can be enforced for the application on the computing device during the offline period of time.

Claims (40)

1. A system, comprising:

a computing device; and

program instructions executable in the computing device that, when executed by the computing device, cause the computing device to:

receive, from a management server, a first application restriction and a second application restriction that are configured to be enforced by an application during an offline period of time, the offline period of time being a time period in which the computing device is disconnected with the management server;

identify a request to execute the application during the offline period of time;

determine a situational context of the computing device based on identifying a first condition associated with the computing device;

cause the first application restriction to be enforced for the application on the computing device based on the identification of the computing device being in the offline period of time and the situational context;

detect a change in the situational context of the computing device during the offline period of time based on identifying a second condition associated with the computing device; and

cause the second application restriction to be enforced for the application on the computing device during the offline period of time based on the change in the situational context of the computing device and the first application restriction having been enforced.

2. The system of claim 1 , wherein the first application restriction comprises a functionality restriction or a data restriction.

3. The system of claim 1 , wherein the identification of the second condition associated with the computing device comprises detecting an indication that a noise level surrounding the computing device has exceeded a noise threshold.

4. The system of claim 1 , wherein the identification of the second condition associated with the computing device comprises receiving an indication of an abnormal battery usage for the computing device.

5. The system of claim 1 , wherein the identification of the second condition associated with the computing device comprises receiving an indication of a failure of the computing device to detect an accessory device through a wireless protocol.

6. The system of claim 1 , wherein the identification of the second condition associated with the computing device comprises receiving an identification of an abnormal event from a pattern of usage for an accessory device associated with the computing device.

7. The system of claim 1 , wherein the first application restriction comprises restricting a first set of function restrictions and the second application restriction comprises a second set of function restrictions that include a larger quantity of function restrictions than the first set of function restrictions.

8. A non-transitory computer-readable medium comprising executable instructions which, when executed by a computing device, cause the computing device to at least:

receive an offline restriction policy associated with an application, the offline restriction policy comprising a first application restriction and a second application restriction that are configured to be enforced-by the application during an offline period of time;

identify a request to execute the application during the offline period of time, the offline period of time representing a time period in which the computing device is disconnected with a management server;

determine a situational context of the computing device based on a detection of a first condition associated with the computing device;

cause the first application restriction to be enforced for the application on the computing device based on the identification of the computing device being in the offline period of time and the situational context;

detect a change in the situational context of the computing device during the offline period of time based on a detection of a second condition associated with the computing device; and

cause the second application restriction to be enforced for the application on the computing device during the offline period of time based on the change in the situational context of the computing device and the first application restriction having been enforced.

9. The non-transitory computer-readable medium of claim 8 , wherein the first application restriction comprises a functionality restriction or a data restriction.

10. The non-transitory computer-readable medium of claim 8 , wherein the detection of the second condition associated with the computing device comprises detecting an indication that a noise level surrounding the computing device has exceeded a noise threshold.

11. The non-transitory computer-readable medium of claim 8 , wherein the detection of the second condition associated with the computing device comprises receiving an indication of an abnormal battery usage for the computing device.

12. The non-transitory computer-readable medium of claim 8 , wherein the detection of the second condition associated with the computing device comprises receiving an indication of a failure of the computing device to detect an accessory device through a wireless protocol.

13. The non-transitory computer-readable medium of claim 8 , wherein the detection of the second condition associated with the computing device comprises receiving an identification of an abnormal event from a pattern of usage for an accessory device associated with the computing device.

14. The non-transitory computer-readable medium of claim 8 , wherein the first application restriction comprises restricting a first set of function restrictions and the second application restriction comprises a second set of function restrictions that include a larger quantity of function restrictions than the first set of function restrictions.

15. A method, comprising:

receiving, by a computing device, a first application restriction and a second application restriction that are configured to be enforced-by an application during an offline period of time, the offline period of time representing a time period in which the computing device is disconnected with a management server;

identifying, by the computing device, a request to execute the application during the offline period of time;

determining, by the computing device, a situational context of the computing device based on a detection of a first condition associated with the computing device;

causing, by the computing device, the first application restriction to be enforced for the application on the computing device based on the identification of the computing device being in the offline period of time and the situational context;

detecting, by the computing device, a change in the situational context of the computing device during the offline period of time based on a detection of a second condition associated with the computing device; and

causing, by the computing device, the second application restriction to be enforced for the application on the computing device during the offline period of time based on the change in the situational context of the computing device and the first application restriction having been enforced.

16. The method of claim 15 , wherein the first application restriction comprises a functionality restriction or a data restriction.

17. The method of claim 15 , wherein the detection of the second condition associated with the computing device comprises detecting an indication that a noise level surrounding the computing device has exceeded a noise threshold.

18. The method of claim 15 , wherein the detection of the second condition associated with the computing device comprises receiving an indication of an abnormal battery usage for the computing device.

19. The method of claim 15 , wherein the detection of the second condition associated with the computing device comprises receiving an indication of a failure of the computing device to detect an accessory device through a wireless protocol.

20. The method of claim 15 , wherein the detection of the second condition associated with the computing device comprises receiving an identification of an abnormal event from a pattern of usage for an accessory device associated with the computing device.

Assignments (3)
PATENT ASSIGNMENT Recorded Aug 5, 2024
From: VMWARE LLC
To: OMNISSA, LLC
Reel/Frame 068327/0365 →
SECURITY INTEREST Recorded Jul 3, 2024
From: OMNISSA, LLC
To: UBS AG, STAMFORD BRANCH
Reel/Frame 068118/0004 →
CHANGE OF NAME Recorded Apr 15, 2024
From: VMWARE, INC.
To: VMWARE LLC
Reel/Frame 067102/0395 →