IP Library Granted Patent US 10,231,126
Granted Patent B2
US 10,231,126 · App. 14/096,691 · Granted Mar 12, 2019

System and method for enterprise security through P2P connection

Inventors: Boris Kai-Tik Chan (Toronto, CA); Allan Baril (Toronto, CA)
Assignee: GPVTL Canada Inc.
H04W12/08H04L63/10H04W12/04
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,231,126
App. No.
14/096,691
Granted
Mar 12, 2019
Kind
B2
Abstract

A method is provided for permitting access to enterprise resources mediated between a first peer device and a second peer device. A shared detection application is installed on both devices. When a second peer device requests access to enterprise resources, the first peer device detects if the devices are within a certain preset distance of each other. The second peer device is permitted to access the enterprise resources while the devices remain within the preset distance of each other. Access is shut-down after a pre-determined time if the first device and the second device are no longer within the preset distance of each other.

Claims (33)

1. A method for permitting access to enterprise resources mediated between a first peer device and a second peer device, the method comprising:

initiating a shared detection application on each of a first peer device and a second peer device;

exchanging a security protocol between the first peer device and the second peer device;

after the exchanging of the security protocol and based on a request by the second peer device to remotely access an enterprise network for an enterprise, detecting, by the shared detection application running on the first peer device, the second peer device is within a preset distance of the first peer device;

based on the shared detection application of the first peer device detecting the second peer device being within a preset distance of the first peer device and the exchange of the security protocol, using the first peer device to permit the second peer device to access the enterprise network;

while the second peer device is permitted access to the enterprise network, performing each of (i) monitoring, by the shared detection application, that the second peer device is within a preset distance of the first peer device; (ii) periodically sending a nonce by the second peer device to the first peer device; (iii) receiving, by the second peer device, a hash value of the nonce and a shared password from the first peer device; and

based on detecting either (i) the second peer device is no longer within the preset distance of the first peer device, or (ii) the received hashed value does not match the hash value of the nonce and the shared password generated by the second peer device,

shutting down access to the enterprise network by the second peer device.

2. The method of claim 1 , further comprising:

discovering, on the first peer device, one or more nearby devices through the shared detection application that executes on each of the first peer device and the second peer device, the one or more nearby devices including the second peer device.

3. The method of claim 2 , wherein the discovering the one or more nearby devices includes using a wireless network selected from the group consisting of: Bluetooth, NFC, and WiFi.

4. The method of claim 2 , further comprising displaying a list or menu of the one or more nearby devices on the first peer device, using the shared detection application.

5. The method of claim 4 , wherein each of the nearby devices is displayed with a unique identifier.

6. The method of claim 1 , further comprising:

wherein while the access is permitted, accessing an enterprise resource from the second peer device directly from an enterprise server without passing through the first peer device.

7. The method of claim 6 , wherein the first peer device is unaware of the second peer device communicating with the enterprise server.

8. The method of claim 1 , wherein based on detecting that the second peer device is no longer within the preset distance of the first peer device, shutting down access to the enterprise network by the second peer device after a pre-determined time following the detection.

9. The method of claim 8 , further comprising:

detecting a location of the second peer device based on

at least one location sensor in communication with the second peer device; or a user input received on the second peer device.

10. The method of claim 9 , wherein the location sensor comprises a GPS receiver or a network receiver.

11. The method of claim 8 , wherein detecting a location of the second peer device includes detecting that the location of the second peer device is in a public or unsecure place, and then shortening a length of the pre-determined time as compared to when the second peer device is determined to be in a private or secure place.

12. The method of claim 8 , wherein detecting the location of the second peer device includes detecting that a location of the second peer device is in an office or place of business, and determining the length of the pre-determined time based on the determination.

13. The method of claim 1 , wherein at least one of the first peer device or the second peer device is a mobile device.

14. The method of claim 8 , further comprising:

determining information about a location of the second peer device relative to the first peer device; and

determining a length of the pre-determined time in response to the determined information about the location.

15. The method of claim 14 , wherein determining information about the location of the second peer device includes determining information from an altimeter of the second peer device.

16. The method of claim 15 , wherein the information includes determining when the second peer device is on a same floor of a building as the first peer device.

17. The method of claim 16 , wherein determining information about the location of the second peer device includes determining information from a Global Positioning System unit of the second peer device.

18. The method of claim 1 , further comprising:

detecting the second peer device using a communication exchange between the first peer device and the second peer device using the shared detection application.

19. The method of claim 18 , wherein the shared detection application, when installed on each of the first peer device and the second peer device, enables communications using embedded P2P resources of each of the respective first and second peer devices.

Assignments (3)
CHANGE OF NAME Recorded Oct 22, 2014
From: XTREME LABS INC.
To: GPVTL CANADA INC.
Reel/Frame 034010/0790 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Oct 8, 2014
From: CHAN, BORIS KAI-TIK; BARIL, ALLAN
To: XTREME LABS INC.
Reel/Frame 033910/0453 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 4, 2013
From: BARIL, ALLAN; CHAN, BORIS KAI-TIK
To: XTREME LABS INC.
Reel/Frame 031716/0119 →
Continuity (2)
Provisional Application 61797383 · Dec 6, 2012
Related Publication 20140165158A1 · Jun 12, 2014