Secure cross-device direct transient data sharing

Patent metadata

Field	Value
Publication number	US-11657170-B2
Application number	US-202015930284-A
Country	US
Kind code	B2
Filing date	May 12, 2020
Priority date	Jan 15, 2020
Publication date	May 23, 2023
Grant date	May 23, 2023

Abstract

Systems and methods can allow for secure cross-device sharing of transient data using direct transient data sharing (“DTDS”). A source destination can share data using local DTDS with an agent on a first device. The agent can send the data to a hub server that runs a security control process and data formatting process. The hub server can determine risk scores for the source and destination devices and allow the sharing to occur if a safety threshold is met. Then an agent on the destination device can receive the transient data and use local DTDS to send the data to a destination application.

First claim

What is claimed is:

1. A method for sharing between user devices using direct transient data sharing (“DTDS”), comprising:
receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;
identifying, at the server, a second device associated with a same user as the first device;
determining that security requirements are met by at least one of the first device and second device; and
in an instance where the security requirements are met, sending the data to a destination application of the second device,
wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

2. The method of claim 1 , further comprising:
determining that the second device runs a different operating system (“OS”) compared to the first device; and
translating the data for use with the different OS.

3. The method of claim 2 , wherein the translating includes the server converting an image to a different image format.

4. The method of claim 2 , wherein the translating includes converting the data to a different size.

5. The method of claim 1 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

6. The method of claim 1 , wherein sending the data to the destination application includes sending the data from the server to a second agent on the second device, and wherein the second agent sends the data to the destination application using DTDS.

7. A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, performs stages for sharing between user devices using direct transient data sharing (“DTDS”), the stages comprising:
receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;
identifying, at the server, a second device associated with a same user as the first device;
determining that security requirements are met by at least one of the first device and second device;
in an instance where the security requirements are met, sending the data to a destination application of the second device;
determining that the second device runs a different operating system (“OS”) compared to the first device; and
translating the data for use with the different OS.

8. The non-transitory, computer-readable medium of claim 7 , wherein the translating includes the server converting an image to a different image format.

9. The non-transitory, computer-readable medium of claim 7 , wherein the translating includes converting the data to a different size.

10. The non-transitory, computer-readable medium of claim 7 , wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

11. The non-transitory, computer-readable medium of claim 7 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

12. The non-transitory, computer-readable medium of claim 7 , wherein sending the data to the destination application includes sending the data from the server to a second agent on the second device, and wherein the second agent sends the data to the destination application using DTDS.

13. A system for secure cross-device transient data sharing using direct transient data sharing (“DTDS”), comprising:
a memory storage including a non-transitory, computer-readable medium comprising instructions; and
a computing device including a hardware-based processor that executes the instructions to carry out stages comprising:
receiving data at a server from a first device, wherein a source application on the first device shares the data with a first agent at the first device using DTDS, and wherein the first agent shares the data with the sever;
identifying, at the server, a second device associated with a same user as the first device;
determining that security requirements are met by at least one of the first device and second device; and
in an instance where the security requirements are met, sending the data to a destination application of the second device.

14. The system of claim 13 , the stages further comprising:
determining that the second device runs a different operating system (“OS”) compared to the first device; and
translating the data for use with the different OS.

15. The system of claim 14 , wherein the translating includes the server converting an image to a different image format.

16. The system of claim 14 , wherein the translating includes converting the data to a different size.

17. The system of claim 13 , wherein determining the security requirements are met includes determining risk scores for the first device and second device based on a management status of the source application and destination application, wherein the risk scores are compared against a threshold to determine whether to send the data to the destination application.

18. The system of claim 13 , wherein determining the security requirements are met is based on compliance of the first and second devices with an enterprise mobility management (“EMM”) compliance policy, wherein a first agent on the first and a second agent on the second device report compliance statuses to the server.

Assignees

• Vmware Inc

Inventors

• Xuan Chaoting
• Lv Lin
• Pan Suyu
• Liu Guoxin
• Yao Qimin
• Zhao Yue

Classifications

• G06F16/258

  Data format conversion from or to a database · CPC title

• G06F21/6245

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• G06F21/44 Primary

  Program or device authentication · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F16/2365

  Ensuring data consistency and integrity · CPC title