Controlling distribution of resources on a network

Patent metadata

Field	Value
Publication number	US-11929937-B2
Application number	US-202217932569-A
Country	US
Kind code	B2
Filing date	Sep 15, 2022
Priority date	Feb 14, 2012
Publication date	Mar 12, 2024
Grant date	Mar 12, 2024

Abstract

Disclosed are various embodiments for controlling a distribution of resources on a network. In one example, among others, a system is configured to receive the plurality of resources and a plurality of rules. The system is also configured to determine an authorized location and an authorized area based on the plurality of rules. The authorized location and the authorized area are determined to have different access rights to the plurality of resources. The system is further configured to determine a location of the computing device and grant access to a resource based on the location of the computing device with respect to the authorization location or the authorized area.

First claim

Therefore, the following is claimed:

1. A non-transitory computer-readable medium embodying a program executable in a computing device, the program comprising code that, when executed by the computing device, causes the computing device to at least:
receive, from a distribution service, a plurality of resources and a plurality of rules associated with the plurality of resources;
determine an authorized location and an authorized area associated with the authorized location based on the plurality of rules, the authorized location and the authorized area are determined to have different access rights to the plurality of resources;
determine a location of the computing device; and
grant access to a resource among the plurality of resources for the computing device based on the location of the computing device with respect to the authorization location or the authorized area.

2. The non-transitory computer-readable medium of claim 1 , wherein the program comprising code that, when executed by the computing device, further causes the computing device to at least:
detect a change of the location of the computing device from the authorized location to the authorized area; and
remove access to the resource based on the change of the location of the computing device to the authorized area.

3. The non-transitory computer-readable medium of claim 2 , wherein removing access to the resource comprises deleting the resource from a memory of the computing device.

4. The non-transitory computer-readable medium of claim 1 , wherein the program comprising code that, when executed by the computing device, further causes the computing device to at least:
determine an authorized time window based at least in part on the plurality of rules, the authorized time window representing a time period in which the computing device is authorized to the access the resource at the authorized location.

5. The non-transitory computer-readable medium of claim 4 , wherein the program comprising code that, when executed by the computing device, further causes the computing device to at least:
detect a present time is not within the authorized time window; and
remove access to the resource based on the present time not being within the authorized time window.

6. The non-transitory computer-readable medium of claim 1 , wherein the authorized area encompasses the authorized location.

7. The non-transitory computer-readable medium of claim 1 , wherein determining the location of the computing device is further based on a previously known location of the computing device and movement sensor data obtained from a movement sensor electrically coupled to the computing device.

8. A system, comprising:
a computing device; and
a memory device including instructions that when executed by the computing device cause the computing device to at least:
receive, from a distribution service, a plurality of resources and a plurality of rules associated with the plurality of resources;
determine an authorized location and an authorized area associated with the authorized location based on the plurality of rules, the authorized location and the authorized area are determined to have different access rights to the plurality of resources;
determine a location of the computing device; and
grant access to a resource among the plurality of resources for the computing device based on the location of the computing device with respect to the authorization location or the authorized area.

9. The system of claim 8 , wherein the instructions, when executed by the computing device, cause the computing device to at least:
detect a change of the location of the computing device from the authorized location to the authorized area; and
remove access to the resource based on the change of the location of the computing device to the authorized area.

10. The system of claim 9 , wherein removing access to the resource comprises deleting the resource from a memory of the computing device.

11. The system of claim 8 , wherein the instructions, when executed by the computing device, cause the computing device to at least:
determine an authorized time window based at least in part on the plurality of rules, the authorized time window representing a time period in which the computing device is authorized to the access the resource at the authorized location.

12. The system of claim 11 , wherein the instructions, when executed by the computing device, cause the computing device to at least:
detect a present time is not within the authorized time window; and
remove access to the resource based on the present time not being within the authorized time window.

13. The system of claim 8 , wherein the authorized area encompasses the authorized location.

14. The system of claim 8 , wherein determining the location of the computing device is further based on a previously known location of the computing device and movement sensor data obtained from a movement sensor electrically coupled to the computing device.

15. A method, comprising:
receiving, using a client device, from a distribution service, a plurality of resources and a plurality of rules associated with the plurality of resources;
determining, using the client device, an authorized location and an authorized area associated with the authorized location based on the plurality of rules, the authorized location and the authorized area are determined to have different access rights to the plurality of resources;
determining, using the client device, a location of the client device; and
granting, using the client device, access to a resource among the plurality of resources for the client device based on the location of the client device with respect to the authorization location or the authorized area.

16. The method of claim 15 , further comprising:
detecting, using the client device, a change of the location of the client device from the authorized location to the authorized area; and
removing, using the client device, access to the resource based on the change of the location of the client device to the authorized area.

17. The method of claim 16 , wherein removing access to the resource comprises deleting the resource from a memory of the client device.

18. The method of claim 15 , further comprising:
determining, using the client device, an authorized time window based at least in part on the plurality of rules, the authorized time window representing a time period in which the client device is authorized to the access the resource at the authorized location.

19. The method of claim 18 , further comprising:
detecting, using the client device, a present time is not within the authorized time window; and
removing, using the client device, access to the resource based on the present time not being within the authorized time window.

20. The method of claim 15 , wherein determining the location of the client device is further based on a signal strength of a transmission signal from a network beacon.

Assignees

• Airwatch Llc

Inventors

• Marshall John
• Stuntebeck Erich
• Jayaprakash Gopinath
• Manton John Joseph
• Brannon Jonathon Blake

Classifications

• H04L47/70 Primary

  Admission control; Resource allocation · CPC title

• G06F21/31 Primary

  User authentication · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L63/101

  Access control lists [ACL] · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title