Incremental compliance remediation

Patent metadata

Field	Value
Publication number	US-11283803-B2
Application number	US-202016869366-A
Country	US
Kind code	B2
Filing date	May 7, 2020
Priority date	Mar 15, 2013
Publication date	Mar 22, 2022
Grant date	Mar 22, 2022

Abstract

Disclosed are various embodiments for enforcing device compliance parameters by inhibiting access to devices, networks or resources. In one embodiment, among others, a computing device identifies a request to access a first resource and determines that a second resource is associated with accessing the first resource based on a resource group identifier. The computing device determines that a compliance rule is associated with the first resource and the second resource based on the resource group identifier. The client device can determine that the compliance rule has been violated. Then, the computing device determines that the compliance rule is associated with an alternative setting and changes the current setting to the alternative setting.

First claim

Therefore, the following is claimed:

1. A method, comprising:
identifying, using a client device, a request to access a first resource;
determining, using the client device, that a second resource is associated with accessing the first resource based on a resource group identifier that is associated with the first resource;
determining, using the client device, a compliance rule that is associated with the first resource and the second resource based on the resource group identifier;
determining, using the client device, that the compliance rule is violated;
determining, using the client device, that the compliance rule is associated with an alternative setting that is more stringent than a current setting;
changing, using the client device, the current setting to the alternative setting by increasing a password complexity requirement; and
enforcing, using the client device, a remedial action instruction received from a remote computing device, wherein the remedial action instruction is received in an occurrence in which an alert has been transmitted to the remote computing device.

2. The method of claim 1 , wherein changing the current setting to the alternative setting comprises adjusting an operating system setting of the client device.

3. The method of claim 1 , further comprising:
transmitting, using the client device, an alert to a remote computing device, wherein the alert comprises an indication of the alternative setting to be implemented in the client device.

4. The method of claim 1 , wherein determining that the compliance rule is violated is based on an event log maintained by the client device.

5. The method of claim 1 , wherein the first resource comprises an application, and identifying the request to access the first resource further comprises:
initiating, using the client device, a limited opening of the application, wherein the limited opening causes the application to identify the compliance rule.

6. The method of claim 1 , further comprising:
determining, using the client device, the resource group identifier is associated with the first resource based on a user credential and a device identifier.

7. A system, comprising,
a computing device that comprises a hardware processor;
a memory in communication to the computing device, wherein the memory comprises a plurality of machine instructions that, when executed, cause the computing device to at least:
identify a request to access a first resource;
determine that a second resource is associated with accessing the first resource based on a resource group identifier that is associated with the first resource;
determine a compliance rule that is associated with the first resource and the second resource based on the resource group identifier;
determine that the compliance rule is violated;
determine that the compliance rule is associated with an alternative setting that is more stringent than a current setting;
change the current setting to the alternative setting by increasing a password complexity requirement; and
enforce a remedial action instruction received from a remote computing device, wherein the remedial action instruction is received in an occurrence in which an alert has been transmitted to the remote computing device.

8. The system of claim 7 , wherein changing the current setting to the alternative setting comprises adjusting an operating system setting of a client device.

9. The system of claim 7 , wherein the plurality of machine instructions, when executed, further cause the computing device to at least:
transmit an alert to a remote computing device, wherein the alert comprises an indication of the alternative setting to be implemented in a client device.

10. The system of claim 7 , wherein determining that the compliance rule is violated is based on an event log maintained by a client device.

11. The system of claim 7 , wherein the first resource comprises an application, and identifying the request to access the first resource further causes the computing device to at least:
initiate a limited opening of the application, wherein the limited opening causes the application to identify the compliance rule.

12. The system of claim 7 , wherein the plurality of machine instructions, when executed, further cause the computing device to at least:
determine the resource group identifier is associated with the first resource based on a user credential and a device identifier.

13. A non-transitory computer-readable medium embodying program instructions executable in a client computing device that, when executed by the client computing device, cause the client computing device to at least:
identify a request to access a first resource;
determine that a second resource is associated with accessing the first resource based on a resource group identifier that is associated with the first resource;
determine a compliance rule that is associated with the first resource and the second resource based on the resource group identifier;
determine that the compliance rule is violated;
determine that the compliance rule is associated with an alternative setting that is more stringent than a current setting;
change the current setting to the alternative setting by increasing a password complexity requirement; and
enforce a remedial action instruction received from a remote computing device, wherein the remedial action instruction is received in an occurrence in which an alert has been transmitted to the remote computing device.

14. The non-transitory computer-readable medium of claim 13 , wherein changing the current setting to the alternative setting comprises adjusting an operating system setting of a client device.

15. The non-transitory computer-readable medium of claim 13 , wherein the program instructions, when executed by the client computing device, further cause the client computing device to at least:
transmit an alert to a remote computing device, wherein the alert comprises an indication of the alternative setting to be implemented in a client device.

16. The non-transitory computer-readable medium of claim 13 , wherein determining that the compliance rule is violated is based on an event log maintained by a client device.

17. The non-transitory computer-readable medium of claim 13 , wherein the first resource comprises an application, and identifying the request to access the first resource further causes the client computing device to at least:
initiate a limited opening of the application, wherein the limited opening causes the application to identify the compliance rule.

Assignees

• Airwatch Llc

Inventors

• Dabbiere Alan
• Stuntebeck Erich

Classifications

• G06F21/62 Primary

  Protecting access to data via a platform, e.g. using keys or access control rules · CPC title

• H04L63/10 Primary

  for controlling access to devices or network resources · CPC title

• G06Q10/0631

  Resource planning, allocation, distributing or scheduling for enterprises or organisations · CPC title