System and method for access control using network verification
AssigneeOpen Text SA ULC
InventorSimon Dominic Copsey
Life of this patent
Estimating the term…
Abstract
A system for controlling access includes a computing device, configured to: determine a first identifier associated with a first access point being used by the computing device to access a network; determine first access control data associated with the first identifier and a first application executing on the computing device; and control access to data over the network by the first application based on the first access control data.
Claims21
A computing device, comprising:
- a processor;
- a non-transitory computer readable medium coupled to the processor, the non-transitory computer readable medium storing computer executable instructions, the computer executable instructions executable by the processor of the computing device to:
- store, at the computing device, first access control data associated with a first device identifier and second access control data associated with a second device identifier, the first access control data specifying a first level of access for a first local application on the computing device to first application data at a content provisioning platform remote from the computing device and the second access control data specifying a second level of access for the first local application to the first application data at the content provisioning platform;
- when the computing device is connected to a first access point:
- determine an identifier of the first access point;
- determine that the first access control data is associated with the identifier of the first access point;
- intercept a first request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the first access control data is associated with the identifier of the first access point, determine if the first local application is permitted to access the first application data according to the first access control data;
- based on a determination that the first local application is not permitted to access the first application data according to the first access control data, block the first request;
- and
- based on a determination that the first local application is permitted to access the first application data according to the first access control data, allow the first request to be sent to the content provisioning platform through the first access point;
- when the computing device is connected to a second access point:
- determine an identifier of the second access point;
- determine that the second access control data is associated with the identifier of the second access point;
- intercept a second request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the second access control data is associated with the identifier of the second access point, determine if the first local application is permitted to access the first application data according to the second access control data;
- based on a determination that the first local application is not permitted to access the first application data according to the second access control data, block the second request;
- and
- based on a determination that the first local application is permitted to access the first application data according to the second access control data, allow the second request to be sent to the content provisioning platform through the first access point.
A computer program product comprising a non-transitory computer readable medium, the non-transitory computer readable medium storing computer executable instructions, the computer executable instructions executable by a processor of a computing device to:
- store, at the computing device, first access control data associated with a first device identifier and second access control data associated with a second device identifier, the first access control data specifying a first level of access for a first local application on the computing device to first application data at a content provisioning platform remote from the computing device and the second access control data specifying a second level of access for the first local application to the first application data at the content provisioning platform;
- when the computing device is connected to a first access point:
- determine an identifier of the first access point;
- determine that the first access control data is associated with the identifier of the first access point;
- intercept a first request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the first access control data is associated with the identifier of the first access point, determine if the first local application is permitted to access the first application data according to the first access control data;
- based on a determination that the first local application is not permitted to access the first application data according to the first access control data, block the first request;
- and
- based on a determination that the first local application is permitted to access the first application data according to the first access control data, allow the first request to be sent to the content provisioning platform through the first access point;
- when the computing device is connected to a second access point:
- determine an identifier of the second access point;
- determine that the second access control data is associated with the identifier of the second access point;
- intercept a second request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the second access control data is associated with the identifier of the second access point, determine if the first local application is permitted to access the first application data according to the second access control data;
- based on a determination that the first local application is not permitted to access the first application data according to the second access control data, block the second request;
- and
- based on a determination that the first local application is permitted to access the first application data according to the second access control data, allow the second request to be sent to the content provisioning platform through the first access point.
A method for controlling access, the method comprising:
- storing, at a computing device, first access control data associated with a first device identifier and second access control data associated with a second device identifier, the first access control data specifying a first level of access for a first local application on the computing device to first application data at a content provisioning platform remote from the computing device and the second access control data specifying a second level of access for the first local application to the first application data at the content provisioning platform;
- when the computing device is connected to a first access point:
- determining an identifier of the first access point;
- determining that the first access control data is associated with the identifier of the first access point;
- intercepting, at the computing device, a first request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the first access control data is associated with the identifier of the first access point, determining if the first local application is permitted to access the first application data according to the first access control data;
- and
- based on a determination that the first local application is not permitted to access the first application data according to the first access control data, blocking the first request;
- when the computing device is connected to a second access point:
- determining an identifier of the second access point;
- intercept a second request from the first local application to the content provisioning platform for the first application data;
- based on the determination that the second access control data is associated with the identifier of the second access point, determining if the first local application is permitted to access the first application data according to the second access control data;
- and
- based on a determination that the first local application is permitted to access the first application data according to the second access control data, allowing the second request to be sent to the content provisioning platform through the first access point.
Dependencies are inferred from the claim text.