US 11,902,098 B1Granted

Computerized systems and methods for adaptive device protection

AssigneePlume Design, Inc.

InventorsPaul White, Susmita Nayak, Kyle McGill, Naveen Ancha, Derek Lownsbrough, Alexey Gadalin

Life of this patent

Estimating the term…

Loading patent…

Abstract

Disclosed are systems and methods that provide a computerized device management framework that adaptively determines and applies security and configuration parameters to a device on a first network, and enables the adaptive application of such parameters as the device disconnects and connects to other networks. The disclosed framework enables the automatic detection of different networks being relied upon by the device for access to the Internet, upon which, management control policies of the device's activities can be controlled and managed in a unified manner. Accordingly, the disclosed framework can enable security and configuration mechanisms applied on a first network, upon which they are associated, to be seamlessly applied on another disparate network via a virtual private network connection enabled via proprietary mechanisms implemented on the device.

Claims17

Dependent claims

A method comprising:

connecting, by a device, to a first network provided a service provider;
identifying, by the device, a profile for a user, the user profile corresponding to the first network, the user profile comprising a management policy associated with the first network that is implemented upon the connection to the first network, the management policy comprising executable instructions related to read/write access by the device to a network resource, the management policy being managed by a policy management service provided by a cloud system;
analyzing, by the device, the management policy associated with the first network;
determining, by the device, based on the analysis of the management policy, a set of network configurations for the user, the set of network configurations comprising specific read/write controls for the user;
controlling, by the device based on the implemented management policy and the determined set of network configurations, activity by the device on the first network;
determining, by the device, to switch to a second network;
executing, by the device, a virtual private network (VPN) application, the execution of the VPN application causing establishment of a VPN connection with the policy management service via the second network, wherein the VPN application enables the management policy of the first network to be applied to network activity by the device on the second network;
and
controlling, by the device, via the VPN application, the network activity of the device on the second network based on the read/write access of the management policy and the determined set of network configurations.

6 more elements

A device comprising:

a processor configured to:
connect to a first network provided a service provider;
identify a profile for a user, the user profile corresponding to the first network, the user profile comprising a management policy associated with the first network that is implemented upon the connection to the first network, the management policy comprising executable instructions related to read/write access by the device to a network resource, the management policy being managed by a policy management service provided by a cloud system;
analyze the management policy associated with the first network;
determine, based on the analysis of the management policy, a set of network configurations for the user, the set of network configurations comprising specific read/write controls for the user;
control, based on the implemented management policy and the determined set of network configurations, activity by the device on the first network;
determine to switch to a second network;
execute a virtual private network (VPN) application, the execution of the VPN application causing establishment of a VPN connection with the policy management service via the second network, wherein the VPN application enables the management policy of the first network to be applied to network activity by the device on the second network;
and
control, via the VPN application, the network activity of the device on the second network based on the read/write access of the management policy and the determined set of network configurations.

7 more elements

A non-transitory computer-readable storage medium tangibly encoded with computer-executable instructions that when executed by a device, perform a method comprising:

connecting, by the device, to a first network provided a service provider;
identifying, by the device, a profile for a user, the user profile corresponding to the first network, the user profile comprising a management policy associated with the first network that is implemented upon the connection to the first network, the management policy comprising executable instructions related to read/write access by the device to a network resource, the management policy being managed by a policy management service provided by a cloud system;
analyzing, by the device, the management policy associated with the first network;
determining, by the device, based on the analysis of the management policy, a set of network configurations for the user, the set of network configurations comprising specific read/write controls for the user;
controlling, by the device based on the implemented management policy and the determined set of network configurations, activity by the device on the first network;
determining, by the device, to switch to a second network;
executing, by the device, a virtual private network (VPN) application, the execution of the VPN application causing establishment of a VPN connection with the policy management service via the second network, wherein the VPN application enables the management policy of the first network to be applied to network activity by the device on the second network;
and
controlling, by the device, via the VPN application, the network activity of the device on the second network based on the read/write access of the management policy and the determined set of network configurations.

6 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/316,701Filed 12 May 2023
Granted: 13 Feb 2024
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

H04L 41/0894
Configuration management of networks or network elements: policy-based network configuration management
H04L 41/0893
Configuration management of networks or network elements: assignment of logical groups to network elements
H04L 63/0272
For separating internal from external traffic, e.g. firewalls: virtual private networks
H04L 63/20
Network architectures or network communication protocols for network security: for managing network security; network security policies in general