IP Library › Granted Patent US 11,677,788
Granted Patent B1
US 11,677,788 · App. 17/965,641 · Granted Jun 13, 2023

Policy-controlled web access based on user activities

Inventors: Siva Prasad Badana (San Jose, CA); Naiming Chu (Los Altos, CA)
Assignee: Netskope, Inc.
H04L63/20H04L63/1425H04L63/1433
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,677,788
App. No.
17/965,641
Filed
Oct 13, 2022
Granted
Jun 13, 2023
Kind
B1
Art Unit
2435
USPC
726/1
Abstract

A policy-controlled access system comprising a client device running a local application, a secure tunnel between a client endpoint of the client device, and a mid-link endpoint of a mid-link server to provide network traffic from the client device to the mid-link server. The mid-link server monitors the network traffic, identifies a plurality of policies corresponding to the third-party content, the plurality of policies is based on parental control configuration set by a parent user, stores the plurality of policies corresponding to the third-party content in a local cache on the client device, and receives a request for data from the child user. After the request is made, the local application correlates the third-party content with the plurality of policies stored in the local cache, identifies a policy associated with the request for the data based on correlation, and authorizes the request for the data based on the identified policy.

Claims (79)

1. A policy-controlled access system for providing access to third-party content, the policy-controlled access system comprises:

a client device comprising a local application, the local application runs on the client device; and

a secure tunnel between a client endpoint of the client device and a mid-link endpoint of a mid-link server, the secure tunnel is configured to:

provide, network traffic from the client device to the mid-link server, wherein the network traffic includes the third-party content accessed by a child user on the client device;

wherein the mid-link server is configured to:

monitor the network traffic from the client device;

identify a plurality of policies corresponding to the third-party content on the client device, wherein the plurality of policies is based on parental control configuration set by a parent user on the client device;

store the plurality of policies corresponding to the third-party content in a local cache on the client device;

receive a request for data from the child user via the client device;

wherein the local application on the client device is configured to:

correlate the third-party content with the plurality of policies stored in the local cache;

identify a policy associated with the request for the data based on correlation; and

authorize the request for the data based on the identified policy.

2. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the mid-link server is further configured to:

use machine learning algorithms to generate user behavior analysis based on the third-party content on the client device;

provide to the client device, the user behavior analysis; and

render on the client device, the user behavior analysis.

3. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the plurality of policies is set by one or more parent users.

4. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the mid-link server is further configured to:

generate by the mid-link server, advertisements based on the third-party content browsed on the client device; and

render the advertisements on the client device.

5. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the mid-link server is further configured to:

generate using machine learning algorithms, rules based on the third-party content; and

provide the rules for rendering on the client device.

6. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the mid-link server is further configured to:

generate using machine learning algorithms, an aggregate score for the third-party content based on the policy;

compare the aggregate score with a threshold value; and

based on the comparison, either permitting or blocking the request for the data.

7. The policy-controlled access system for providing access to third-party content of claim 1 , wherein the third-party content includes Domain Name System (DNS)/Uniform Resource Locator (URL) of websites browsed or streamed by the child user and/or applications downloaded or installed by the child user.

8. A method for providing policy-controlled web access on an internet connected network, the method comprises:

running a local application on a client device;

provisioning a secure tunnel between a client endpoint of the client device and a mid-link endpoint of a mid-link server;

providing by the secure tunnel, network traffic from the client device to the mid-link server, wherein the network traffic includes third-party content accessed by a child user on the client device;

monitoring by the mid-link server, the network traffic from the client device;

identifying by the mid-link server, a plurality of policies corresponding to the third-party content on the client device, wherein the plurality of policies is based on parental control configuration set by a parent user on the client device;

storing by the mid-link server, the plurality of policies corresponding to the third-party content in a local cache on the client device;

receiving a request for data from the child user over the internet network;

correlating by the local application on the client device, the third-party content with the plurality of policies stored in the local cache;

identifying by the local application, a policy associated with the request for the data based on correlation; and

authorizing by the local application, the request for the data based on the identified policy.

9. The method for providing policy-controlled access on an internet connected network of claim 8 , further comprising:

generating by the mid-link server using machine learning algorithms, user behavior analysis based on the third-party content on the client device;

providing by the mid-link server to the client device, the user behavior analysis; and

rendering on the client device, the user behavior analysis.

10. The method for providing policy-controlled access on an internet connected network of claim 8 , wherein the plurality of policies is set by one or more parent users.

11. The method for providing policy-controlled access on an internet connected network of claim 8 , further comprising:

generating by the mid-link server, advertisements based on the third-party content browsed on the client device; and

rendering the advertisements on the client device.

12. The method for providing policy-controlled access on an internet connected network of claim 8 , further comprising:

generating by the mid-link server using machine learning algorithms, rules based on the third-party content; and

providing the rules for rendering on the client device.

13. The method for providing policy-controlled access on an internet connected network of claim 8 , further comprising:

generating by the mid-link server using machine learning algorithms, an aggregate score for the third-party content based on the policy;

comparing the aggregate score with a threshold value; and

based on the comparison, either permitting or blocking the request for the data.

14. The method for providing policy-controlled access on an internet connected network of claim 8 , wherein the third-party content includes Domain Name System (DNS)/Uniform Resource Locator (URL) of websites browsed or streamed by the child user and/or applications downloaded or installed by the child user.

15. A policy-controlled access system for providing access to third-party content based on policies in the internet network, the policy-controlled access system comprises a plurality of servers, collectively having code for:

running a local application on a client device;

provisioning a secure tunnel between a client endpoint of the client device and a mid-link endpoint of a mid-link server;

providing by the secure tunnel, network traffic from the client device to the mid-link server, wherein the network traffic includes third-party content accessed by a child user on the client device;

monitoring by the mid-link server, the network traffic from the client device;

identifying by the mid-link server, a plurality of policies corresponding to the third-party content on the client device, wherein the plurality of policies is based on parental control configuration set by a parent user on the client device;

storing by the mid-link server, the plurality of policies corresponding to the third-party content in a local cache on the client device;

receiving a request for data from the child user over the internet network;

correlating by the local application on the client device, the third-party content with the plurality of policies stored in the local cache;

identifying by the local application, a policy associated with the request for the data based on correlation; and

authorizing by the local application, the request for the data based on the identified policy.

16. The policy-controlled access system for providing access to third-party content based on policies in the internet network of claim 15 , further comprising:

generating by the mid-link server, using machine learning algorithms, user behavior analysis based on the third-party content on the client device;

providing by the mid-link server to the client device, the user behavior analysis; and

rendering on the client device, the user behavior analysis.

17. The policy-controlled access system for providing access to third-party content based on policies in the internet network of claim 15 , wherein the plurality of policies is set by one or more parent users.

18. The policy-controlled access system for providing access to third-party content based on policies in the internet network of claim 15 , further comprising:

generating by the mid-link server, advertisements based on the third-party content browsed on the client device; and

rendering the advertisements on the client device.

19. The policy-controlled access system for providing access to third-party content based on policies in the internet network of claim 15 , further comprising:

generating by the mid-link server using machine learning algorithms, rules based on the third-party content; and

providing the rules for rendering on the client device.

20. The policy-controlled access system for providing access to third-party content based on policies in the internet network of claim 15 , wherein the third-party content includes Domain Name System (DNS)/Uniform Resource Locator (URL) of websites browsed or streamed by the child user and/or applications downloaded or installed by the child user.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 17, 2022
From: CHU, NAIMING; BADANA, SIVA PRASAD
To: NETSKOPE, INC.
Reel/Frame 061445/0612 →
Cited By (3)
US 12,238,177 US 12,363,000 US 12,489,734