Back to results
US 12,182,291 B2Granted
System and method for access control using network verification
AssigneeOpen Text SA ULC
InventorSimon Dominic Copsey
Life of this patent
Estimating the term…
Abstract
Systems, methods, and computer program products for controlling access by applications to application data are provided. A computing device receives a request for access control data over a network and returns access control data to the requestor to control an applications access over the network to application data. The access control data returned to the requestor includes access-point dependent access control data to control the application's access to the application data based on the access point used to access the network.
Claims30
A computer-implemented method for controlling application access to data, the method comprising:
- accessing a datastore storing first access control data for a plurality of applications, the first access control data comprising first device dependent access control data for a plurality of applications;
- receiving, over a network, a request for access control data for a first application, wherein the request for access control data for the first application comprises:
- an access point identifier for an access point used by the first application;
- an application identifier for the first application, and
- network path information for a network path;
- and
- servicing the request for access control data for the first application to return second access control data over the network to control access by the first application to application data over the network, wherein servicing the request for access control data for the first application comprises determining the second access control data from the first access control data, wherein the determining comprises determining the second access control data using the application identifier, the access point identifier and the network path information, the second access control data comprising first access point-dependent access control data from the first device dependent access control data, wherein the second access point-dependent access control data specifies a level of access for the first application when using the access point identified by the access point identifier to access the application data.
4 more elements
A computer program product comprising a non-transitory, computer-readable medium, the non-transitory, computer-readable medium storing computer-executable instructions, the computer-executable instructions comprising instructions for:
- accessing a datastore storing first access control data, the first access control data comprising first device dependent access control data for a plurality of applications;
- receiving, over a network, a request for access control data for a first application, wherein the request for access control data for the first application comprises an access point identifier for an access point used by the first application;
- servicing the request for access control data for the first application to return second access control data over the network to control access by the first application to application data over the network, wherein servicing the request for access control data for the first application comprises determining the second access control data from the first access control data, the second access control data comprising first access point-dependent access control data from the first device dependent access control data, wherein the second access point-dependent access control data specifies a level of access for the first application when using the access point identified by the access point identifier to access the application data;
- receiving, over the network, a request for access control data for a second application;
- and
- servicing the request for access control data for the second application to return third access control data over the network to control access by the second application to the application data, wherein servicing the request for access control data for the second application comprises determining the third access control data from the first access control data, the third access control data comprising second access point-dependent access control data from the first device dependent access control data.
3 more elements
A computer-implemented method for controlling application access to data, the method comprising:
- accessing a datastore storing first access control data for a plurality of applications, the first access control data comprising first device dependent access control data for a plurality of applications;
- receiving, over a network, a request for access control data for a first application, wherein the request for access control data for the first application comprises an access point identifier for an access point used by the first application;
- and
- servicing the request for access control data for the first application to return second access control data over the network to control access by the first application to application data over the network, wherein servicing the request for access control data for the first application comprises determining the second access control data from the first access control data, the second access control data comprising first access point-dependent access control data from the first device dependent access control data, wherein the second access point-dependent access control data specifies a level of access for the first application when using the access point identified by the access point identifier to access the application data;
- receiving, over the network, a request for access control data for a second application;
- and
- servicing the request for access control data for the second application to return third access control data over the network to control access by the second application to the application data over the network, wherein servicing the request for access control data for the second application comprises determining the third access control data from the first access control data, the third access control data comprises the second access point-dependent access control data from the first device dependent access control data.
4 more elements
A computer program product comprising a non-transitory, computer-readable medium, the non-transitory, computer-readable medium storing computer-executable instructions, the computer-executable instructions comprising instructions for:
- accessing a datastore storing first access control data, the first access control data comprising first device dependent access control data for a plurality of applications;
- receiving, over a network, a request for access control data for a first application, wherein the request for access control data for the first application comprises:
- an access point identifier for an access point used by the first application;
- an application identifier for the first application, and
- network path information for a network path;
- and
- servicing the request for access control data for the first application to return second access control data over the network to control access by the first application to application data over the network, wherein servicing the request for access control data for the first application comprises determining the second access control data from the first access control data, wherein the determining comprises determining the second access control data using the application identifier, the access point identifier and the network path information, the second access control data comprising first access point-dependent access control data from the first device dependent access control data, wherein the second access point-dependent access control data specifies a level of access for the first application when using the access point identified by the access point identifier to access the application data.
4 more elements
Dependencies are inferred from the claim text.