Method and system for dynamic user application control service

A system comprising:

• a network device comprising:
• a communication interface;
• and
• a processor configured to:
• receive, from an application device, a request for access controls associated with a user application and an end device;
• generate, based on the request, policies pertaining to the access controls, wherein the policies include at least one of time-based rules, location-based rules, or application type-based rules;
• obtain a current location of the end device;
• compare at least one of a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application type-based rules;
• generate, based on the comparing, a policy decision among the policies pertaining to the access controls;
• and
• apply, based on the policy decision, at least one of the time-based rules, the location-based rules, or the application type-based rules for establishment of an application session with the end device.

A non-transitory computer-readable storage medium storing instructions executable by a processor of a network device, wherein the instructions are configured to:

• receive, from an application device, a request for access controls associated with a user application and an end device;
• generate, based on the request, policies pertaining to the access controls, wherein the policies include at least one of time-based rules, location-based rules, and application type-based rules;
• obtain a current location of the end device;
• compare at least one of a current time with the time-based rules, the current location with the location-based rules, or an application type for the user application with the application type-based rules;
• generate, based on the comparing, a policy decision among the policies pertaining to the access controls;
• and
• apply, based on the policy decision, at least one of the time-based rules, the location-based rules, or the application type-based rules for establishment of an application session with the end device.