US 12,192,244 B2 · Resource access management based on confidence level in device posture

Abstract

Systems and methods are described herein for assessing the device posture of user devices requesting access to a managed resource and for determining a confidence level in the device's posture. In an example, a user device can request a managed resource. A server can receive the request and retrieve an associated access policy. The access policy can include policy attributes to use for assessing the user device's device posture. The server can calculate a device attribute score for each policy attribute. The server can also calculate a confidence score for each device attribute score that measures the confidence level in the device attribute score. Using the two scores, the server can calculate a device posture score. Access to the resource can be granted or denied based on whether the device posture score exceeds a threshold score designated in the access policy.

Claims20

Dependent claims

A method for determining confidence in device posture, comprising:

receiving a resource access request for a managed resource;
retrieving an access policy associated with the managed resource;
retrieving device data corresponding to a first policy attribute identified in the access policy;
determining, based on the device data, a first device attribute score corresponding to the first policy attribute,
determining a first confidence score corresponding to the first policy attribute;
determining, using the first device attribute score and the first confidence score, a first device posture score;
comparing the first device posture score to a first threshold from the access policy;
and
in an instance where the first device posture score exceeds the first threshold, granting access to the managed resource.

6 more elements

A non-transitory, computer-readable medium containing instructions that, when executed by a hardware-based processor, causes the processor to perform stages for determining confidence in device posture, the stages comprising:

receiving a resource access request for a managed resource;
retrieving an access policy associated with the managed resource;
retrieving device data corresponding to a first policy attribute identified in the access policy;
determining, based on the device data, a first device attribute score corresponding to the first policy attribute,
determining a first confidence score corresponding to the first policy attribute;
determining, using the first device attribute score and the first confidence score, a first device posture score;
comparing the first device posture score to a first threshold from the access policy;
and
in an instance where the first device posture score exceeds the first threshold, granting access to the managed resource.

6 more elements

A system for determining confidence in device posture, comprising:

a memory storage including a non-transitory, computer-readable medium comprising instructions;
and
a hardware-based processor that executes the instructions to carry out stages comprising:
receiving a resource access request for a managed resource;
retrieving an access policy associated with the managed resource;
retrieving device data corresponding to a first policy attribute identified in the access policy;
determining, based on the device data, a first device attribute score corresponding to the first policy attribute,
determining a first confidence score corresponding to the first policy attribute;
determining, using the first device attribute score and the first confidence score, a first device posture score;
comparing the first device posture score to a first threshold from the access policy;
and
in an instance where the first device posture score exceeds the first threshold, granting access to the managed resource.

9 more elements

Dependencies are inferred from the claim text.

Resource access management based on confidence level in device posture

Life of this patent

Resource access management based on confidence level in device posture

Life of this patent

Abstract

Claims20