US 11,451,548 B2Granted

Rule-based application access management

AssigneeNumecent Holdings, Inc.

InventorsArthur S. Hitomi, Robert Tran, Peter J. Kammer, Doug Pfiffner, Huy Nguyen

Life of this patent

Estimating the term…

Loading patent…

Abstract

A container that manages access to protected resources using rules to intelligently manage them includes an environment having a set of software and configurations that are to be managed. A rule engine, which executes the rules, may be called reactively when software accesses protected resources. The engine uses a combination of embedded and configurable rules. It may be desirable to assign and manage rules per process, per resource (e.g. file, registry, etc.), and per user. Access rules may be altitude-specific access rules.

Claims16

Dependent claims

A method comprising:

obtaining, by a rule engine comprising one or more processors and memory, a request from a process to access one or more resources in a software container, wherein the rule engine obtaining the request comprises the rule engine using a file system hook to intercept the request, and wherein the software container includes the rule engine redundantly, or via relative global access;
assigning, by the rule engine to the process, a rule that allows or denies access to the one or more resources;
if the rule assigned to the process allows access to the one or more resources, instructing, by the rule engine, the software container to allow the process access to the one or more resources;
if the rule assigned to the process denies access to the one or more resources and the process is located within the software container, instructing, by the rule engine, the software container to copy the one or more resources for local modification by the process.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 16/513,644Filed 16 Jul 2019 · continuation
Priority: 23 Oct 2006
Published: US 2020/0162464 A121 May 2020
Granted: 20 Sep 2022
Term ends: Not estimatedThe source records don’t support an estimate.

Classification10 codes

H04L 63/10
Network architectures or network communication protocols for network security: for controlling access to devices or network resources
G06F 9/468
Multiprogramming arrangements: specific access rights for resources, e.g. using capability register
G06F 21/6218
Protecting access to data via a platform, e.g. using keys or access control rules: to a system of files or objects, e.g. local or distributed file…
H04L 41/0813
Configuration setting: characterised by the conditions triggering a change of settings

Family

Application60/853,941Us provisional application · filed 23 Oct 2006
Application11/977,187Parent of this continuation · filed 23 Oct 2007
Application13/594,041Parent of this continuation · filed 24 Aug 2012
US 8,261,345 B2Parent of this continuation · filed 4 Sep 2012
Application14/324,571Parent of this continuation · filed 7 Jul 2014
US 8,782,778 B2Parent of this continuation · filed 15 Jul 2014
Application14/712,339Parent of this continuation · filed 14 May 2015
US 9,054,963 B2Parent of this continuation · filed 9 Jun 2015
Application15/150,874Parent of this continuation · filed 10 May 2016
US 9,380,063 B2Parent of this continuation · filed 28 Jun 2016
Application15/390,326Parent of this continuation · filed 23 Dec 2016
US 9,571,501 B2Parent of this continuation · filed 14 Feb 2017
Application15/598,993Parent of this continuation · filed 18 May 2017
US 9,699,194 B2Parent of this continuation · filed 4 Jul 2017
Application15/795,170Parent of this continuation · filed 26 Oct 2017
US 9,825,957 B2Parent of this continuation · filed 21 Nov 2017
Application16/011,481Parent of this continuation · filed 18 Jun 2018
US 10,057,268 B2Parent of this continuation · filed 21 Aug 2018
US 10,356,100 B2Parent of this continuation · filed 16 Jul 2019
US 2020/0162464 A1Pre-grant publication · published 21 May 2020
US 2008/0109876 A1Published application
US 2012/0331570 A1Published application
US 2014/0325610 A1Published application
US 2015/0249671 A1Published application
US 2016/0255085 A1Published application
US 2017/0111361 A1Published application
US 2017/0257371 A1Published application
US 2018/0063144 A1Published application
US 2018/0316677 A1Published application
US 11,451,548 B2This patent

From the US filing history. Foreign family members aren’t listed.

Timeline

Citations

Open elsewhere

Building an agent or pulling many patents? Use the API or MCP server instead of scraping pages. Get an API key