Secure application leveraging of web filter proxy services

Patent metadata

Field	Value
Publication number	US-9246918-B2
Application number	US-201313891551-A
Country	US
Kind code	B2
Filing date	May 10, 2013
Priority date	May 10, 2013
Publication date	Jan 26, 2016
Grant date	Jan 26, 2016

Abstract

Secure application leveraging of a filter proxy service may be provided. In response to receiving a request to access a resource, a filter proxy service may be used to determine whether the request to access the resource is approved. If the request to access the resource is approved, the access to the resource may be allowed to continue.

First claim

What is claimed is:

1. A method for controlling access of client devices enrolled in a management system, comprising:
receiving, from a secure application executing on a client device, a first request to access a resource, the secure application being provisioned as part of the management system separately from a client application;
in response to the first request, transmitting, from the client device, a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;
obtaining, in the client device, the indication that the aggregate result determines that the resource complies with the acceptable use policy; and
in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, granting, in the client device, the first request to access the resource.

2. The method of claim 1 , wherein the resource comprises at least one of a database, a document, a web page, a software resource, a hardware resource, a file, a message, or an application.

3. The method of claim 1 , wherein the first request is received using a management application in the client device.

4. The method of claim 1 , wherein granting the first request to access to the resource comprises allowing the secured application to cause the client device to request the resource.

5. The method of claim 1 , further comprising causing, using the client device, the indication that the resource complies with the acceptable use policy to be cached.

6. The method of claim 1 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a majority of the plurality of filter proxy services determined that the resource complies with the acceptable use policy.

7. The method of claim 1 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a weighted combination of the filter proxy services determined that the resource complies with the acceptable use policy.

8. The method of claim 1 , further comprising:
providing, to the client device, an agent application in addition to the secure application, wherein the agent application:
monitors requests to access resources; and
determines whether the requests should be approved based on one or more compliance rules that specify acceptable device characteristics.

9. A system for controlling access of client devices enrolled in a management system comprising:
a client device comprising a processor; and
a memory storage that is accessible to the processor, wherein the memory storage comprises a plurality of program instructions that, upon execution by the processor, cause the processor to at least:
receive, from a secure application, a first request to access a resource, the secure application being provisioned as part of the management system separately from a client application;
in response to the first request, transmit a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;
obtain the indication that the aggregate result determines that the resource complies with the acceptable use policy; and
in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, grant the first request to access the resource.

10. The system of claim 9 , wherein at least one of the plurality of filter proxy services comprises a third party service relative to at least one party that operates the client device and the client device.

11. The system of claim 9 , wherein the plurality of program instructions, upon execution by the processor, further cause the processor to at least initiate an application programming interface (API) call associated with the filter proxy service.

12. The system of claim 9 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a majority of the plurality of filter proxy services determined that the resource complies with the acceptable use policy.

13. The system of claim 9 , wherein the memory storage further comprises a plurality of program instructions that, upon execution by the processor, cause the processor to at least:
provide, to the client device, an agent application in addition to the secure application, wherein the agent application authorizes a user of the client device to access the resource based on biometric data.

14. A non-transitory computer-readable medium that stores a set of instructions that, when executed by a processor, cause the processor to perform a method for controlling access of client devices enrolled in a management system, comprising:
receiving, from a secure application, a first request to access a resource, the secure application being provisioned as part of the management system;
in response to the first request, transmitting a second request for a compliance server to provide an indication that an aggregate result of content analysis from a plurality of filter proxy services determines that the resource complies with an acceptable use policy;
obtaining the indication that the aggregate result determines that the resource complies with the acceptable use policy; and
in response to the indication that the aggregate result determines that the resource complies with the acceptable use policy, granting the first request to access the resource.

15. The non-transitory computer-readable medium of claim 14 , wherein the indication comprises a prior response associated with the resource that is cached.

16. The non-transitory computer-readable medium of claim 14 , wherein the resource comprises a database.

17. The non-transitory computer-readable medium of claim 14 , wherein the resource comprises a hardware resource.

18. The non-transitory computer-readable medium of claim 14 , wherein granting the first request to access the resource comprises allowing the secured application to cause the processor to request the resource.

19. The non-transitory computer-readable medium of claim 14 , wherein the indication that the aggregate result of content analysis from the plurality of filter proxy services further indicates that a weighted combination of the filter proxy services determined that the resource complies with the acceptable use policy.

20. The computer-readable medium of claim 14 , wherein the instructions, when executed, cause the process to perform additional steps comprising:
receiving the second request using a management application; and
communicating, by the management application, with the plurality of filter proxy services to determine whether the resource complies with the acceptable use policy, wherein the client device would be unable to independently communicate with each of the filter proxy services; and
calculating, by the management application based on the responses from the plurality of filter proxy services, the aggregate result.

Assignees

• Sky Socket Llc
• Airwatch Llc

Inventors

• Marshall John
• Stuntebeck Erich
• Sorensen Blake

Classifications

• H04L63/0861

  using biometrical features, e.g. fingerprint, retina-scan (cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231) · CPC title

• H04L51/12

  Electricity · mapped topic

• H04L63/08

  for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32) · CPC title

• H04L63/145

  the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms · CPC title

• H04L63/0281

  Proxies · CPC title