# US 11,122,042 B1 · Methods for dynamically managing user access control and devices thereof > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,122,042 B1 - Document ID: US11122042B1 - Status: Granted - Kind: B1 - Application number: 15/977,292 - Filed: 2018-05-11 - Granted: 2021-09-14 - Earliest claimed: 2017-05-12 - Assignees: F5 Networks, Inc. - Applicants: F5 Networks, Inc. - Inventors: Ravi Natarajan - Web page: https://patentgrep.com/patent/US11122042B1 ## CPC - H04L 63/102: {Entity profiles} - H04L 47/10: Flow control; Congestion control - H04L 63/0227: {Filtering policies (mail message filtering H04L51/212)} - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - H04L 63/10: {for controlling access to devices or network resources} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, non-transitory computer readable media, and network traffic manager apparatus that assists with dynamically managing user access control includes receiving a request to access one or more applications from a client. Client data associated with the client and monitored application access traffic data between the client and a server for the one or more applications is obtained. One or more access control checks and an enforcement order is determined based on the obtained client data and the monitored application access traffic data. The determined one or more access control checks is applied on the client in the determined enforcement order. Access to the requested one or more applications are provided when the applied one or more access control checks authenticate the received request. ## Claims ### Claim 1 A method for dynamically managing user access control, the method implemented by a network traffic management system comprising one or more network traffic apparatuses, client devices, or server devices, the method comprising: obtaining client data associated with a client and stored historical monitored application access traffic data between the client and a server executing one or more applications requested by the client; determining a subset of access control checks from a plurality of access control checks and a sequence to apply the determined subset of the access control checks based on the obtained client data and the stored historical monitored application access traffic data, the obtained client data comprising one or more previously enforced access control checks; applying the determined subset of access control checks on the client in the determined sequence; and providing access to the requested one or more applications when the subset of access control checks is applied. ### Claim 2 (depends on 1) The method as set forth in claim 1 further comprising: applying one or more initial access control checks on the client; receiving a response to the applied one or more initial access control checks; and storing the received response corresponding to the applied one or more initial access control checks as the client data. ### Claim 3 (depends on 1) The method as set forth in claim 1 further comprising: monitoring traffic data for the one or more applications between the client and a server when the access to the requested one or more applications are provided; and storing the monitored application access traffic data. ### Claim 4 (depends on 2) The method as set forth in claim 2 further comprising, repeating the applying, the receiving, and the storing for all interactions with the client. ### Claim 5 (depends on 3) The method as set forth in claim 3 further comprising determining the one or more access control checks is further based on the stored application access traffic data. ### Claim 6 A non-transitory computer readable medium having stored thereon instructions for dynamically managing user access control comprising executable code which when executed by one or more processors, causes the processors to: obtain client data associated with a client and stored historical monitored application access traffic data between the client and a server executing one or more applications requested by the client; determine a subset of access control checks from a plurality of access control checks and a sequence to apply the determined subset of the access control checks based on the obtained client data and the stored historical monitored application access traffic data, the obtained client data comprising one or more previously enforced access control checks; apply the determined subset of access control checks on the client in the determined sequence; and provide access to the requested one or more applications when the subset of access control checks is applied. ### Claim 7 (depends on 6) The medium as set forth in claim 6 further comprising: apply one or more initial access control checks on the client; receive a response to the applied one or more initial access control checks; and store the received response corresponding to the applied one or more initial access control checks as the client data. ### Claim 8 (depends on 6) The medium as set forth in claim 6 further comprising: monitor traffic data for the one or more applications between the client and a server when the access to the requested one or more applications are provided; and store the monitored application access traffic data. ### Claim 9 (depends on 7) The medium as set forth in claim 7 further comprising, repeat the applying, the receiving, and the storing for all interactions with the client. ### Claim 10 (depends on 8) The medium as set forth in claim 8 further comprising determine the one or more access control checks is further based on the stored application access traffic data. ### Claim 11 A network traffic manager apparatus, comprising memory comprising programmed instructions stored in the memory and one or more processors configured to be capable of executing the programmed instructions stored in the memory to: obtain client data associated with a client and stored historical monitored application access traffic data between the client and a server executing one or more applications requested by the client; determine a subset of access control checks from a plurality of access control checks and a sequence to apply the determined subset of the access control checks based on the obtained client data and the stored historical monitored application access traffic data, the obtained client data comprising one or more previously enforced access control checks; apply the determined subset of access control checks on the client in the determined sequence; and provide access to the requested one or more applications when the subset of access control checks is applied. ### Claim 12 (depends on 11) The device as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: apply one or more initial access control checks on the client; receive a response to the applied one or more initial access control checks; and store the received response corresponding to the applied one or more initial access control checks as the client data. ### Claim 13 (depends on 11) The device as set forth in claim 11 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: monitor traffic data for the one or more applications between the client and a server when the access to the requested one or more applications are provided; and store the monitored application access traffic data. ### Claim 14 (depends on 12) The device as set forth in claim 12 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to repeat the applying, the receiving, and the storing for all interactions with the client. ### Claim 15 (depends on 13) The device as set forth in claim 13 wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to determine the one or more access control checks is further based on the stored application access traffic data. ### Claim 16 A network traffic management system, comprising one or more traffic management apparatuses, client devices, or server devices, the network traffic management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to: obtain client data associated with a client and stored historical monitored application access traffic data between the client and a server executing one or more applications requested by the client; determine a subset of access control checks from a plurality of access control checks and a sequence to apply the determined subset of the access control checks based on the obtained client data and the stored historical monitored application access traffic data, the obtained client data comprising one or more previously enforced access control checks; apply the determined subset of access control checks on the client in the determined sequence; and provide access to the requested one or more applications when the subset of access control checks is applied. ### Claim 17 (depends on 16) The network traffic management system of claim 16, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: apply one or more initial access control checks on the client; receive a response to the applied one or more initial access control checks; and store the received response corresponding to the applied one or more initial access control checks as the client data. ### Claim 18 (depends on 16) The network traffic management system of claim 16, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to: monitor traffic data for the one or more applications between the client and a server when the access to the requested one or more applications are provided; and store the monitored application access traffic data. ### Claim 19 (depends on 18) The network traffic management system of claim 18, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to determine the one or more access control checks is further based on the stored application access traffic data. ### Claim 20 (depends on 18) The network traffic management system of claim 18, wherein the one or more processors are further configured to be capable of executing the programmed instructions stored in the memory to repeat the applying, the receiving, and the storing for all interactions with the client.