Back to results
US 11,599,683 B2Granted
Enforcing authorization policies for computing devices
AssigneeMicroStrategy Incorporated
InventorsAaron P. Hinkle, Jason P Torrey
Life of this patent
Estimating the term…
Abstract
Methods, systems, and apparatus, including computer programs encoded on computer-storage media, for enforcing policies for computing devices. In some implementations, content for presentation by an electronic device is received. Context data indicating a current context of the electronic device is obtained. Policy data indicating a policy corresponding to at least one of the electronic device, a user of the electronic device, the content for presentation, or data associated with the content is accessed. The policy indicates one or more context-dependent limitations on presentation of the content by the electronic device. Presentation of the content by the electronic device is managed based on a set of actions the policy permits for the current context.
Claims20
A method performed by one or more network devices, the method comprising:
- receiving, by the one or more network devices, a request to retrieve content from a server for presentation by an electronic device, wherein the request is received from the electronic device over a communication network;
- receiving, by the one or more network devices, context data associated with the request, wherein the context data is provided over the communication network and indicates a current context of the electronic device;
- in response to receiving the request and the context data over the communication network, accessing, by the one or more network devices, policy data identified based on the context data, wherein the policy data indicates a policy corresponding to at least one of the electronic device, a user of the electronic device, the content for presentation, or data associated with the content, wherein the policy indicates one or more context-dependent limitations on presentation of the content by the electronic device;
- before providing the request to the server over the communication network:
- based on the accessed policy data and the received context data, determining, by the one or more network devices, that the policy does not permit at least a portion of the content requested from the server by the request to be displayed by the electronic device in the current context;
- and
- based on the determination that the policy does not permit at least the portion of the content requested from the server by the request to be displayed by the electronic device in the current context, processing, by the one or more network devices, the request by (i) blocking the request so that the request is not provided to the server or (ii) modifying the request and sending the modified request to the server.
4 more elements
A system comprising:
- one or more network devices;
- and
- one or more machine-readable media storing instructions that, when executed by the one or more network devices, cause the one or more network devices to perform operations comprising:
- receiving, by the one or more network devices, a request to retrieve content from a server for presentation by an electronic device, wherein the request is received from the electronic device over a communication network;
- receiving, by the one or more network devices, context data associated with the request, wherein the context data is provided over the communication network and indicates a current context of the electronic device;
- in response to receiving the request and the context data over the communication network, accessing, by the one or more network devices, policy data identified based on the context data, wherein the policy data indicates a policy corresponding to at least one of the electronic device, a user of the electronic device, the content for presentation, or data associated with the content, wherein the policy indicates one or more context-dependent limitations on presentation of the content by the electronic device;
- before providing the request to the server over the communication network:
- based on the accessed policy data and the received context data, determining, by the one or more network devices, that the policy does not permit at least a portion of the content requested from the server by the request to be displayed by the electronic device in the current context;
- and
- based on the determination that the policy does not permit at least the portion of the content requested from the server by the request to be displayed by the electronic device in the current context, processing, by the one or more network devices, the request by (i) blocking the request so that the request is not provided to the server or (ii) modifying the request and sending the modified request to the server.
7 more elements
One or more non-transitory machine-readable media storing instructions that, when executed by one or more network devices, cause the one or more network devices to perform operations comprising:
- receiving, by the one or more network devices, a request to retrieve content from a server for presentation by an electronic device, wherein the request is received from the electronic device over a communication network;
- receiving, by the one or more network devices, context data associated with the request, wherein the context data is provided over the communication network and indicates a current context of the electronic device;
- in response to receiving the request and the context data over the communication network, accessing, by the one or more network devices, policy data identified based on the context data, wherein the policy data indicates a policy corresponding to at least one of the electronic device, a user of the electronic device, the content for presentation, or data associated with the content, wherein the policy indicates one or more context-dependent limitations on presentation of the content by the electronic device;
- before providing the request to the server over the communication network:
- based on the accessed policy data and the received context data, determining, by the one or more network devices, that the policy does not permit at least a portion of the content requested from the server by the request to be displayed by the electronic device in the current context;
- and
- based on the determination that the policy does not permit at least the portion of the content requested from the server by the request to be displayed by the electronic device in the current context, processing, by the one or more network devices, the request by (i) blocking the request so that the request is not provided to the server or (ii) modifying the request and sending the modified request to the server.
4 more elements
Dependencies are inferred from the claim text.