Policy-based secure containers for multiple enterprise applications

A method to determine enterprise security policies for a client computing device, the method comprising:

• receiving, by a distributed network node from the client computing device, device attribute information that identifies attributes of the client computing device, wherein the device attribute information is indicative of a hardware component of the client computing device or a software environment of the client computing device, and wherein the distributed network node is communicatively coupled to the client computing device via a radio access network;
• determining, by the distributed network node, a device trust level for the client computing device based on the device attribute information indicative of the hardware component of the client computing device or the software environment of the client computing device, wherein the device trust level is indexed by the device attribute information;
• receiving, by the distributed network node, a request for access to an enterprise application from the client computing device;
• determining, by the distributed network node, a data sensitivity level based on the requested enterprise application;
• determining, by the distributed network node, a security policy based on the device trust level and the data sensitivity level;
• and
• sending the security policy from the distributed network node to the client computing device.

One or more non-transitory, computer-readable storage media comprising a plurality of instructions that in response to being executed cause an distributed network node to:

• receive, from a client computing device, device attribute information that identifies attributes of the client computing device, wherein the device attribute information is indicative of a hardware component of the client computing device or a software environment of the client computing device, and wherein the distributed network node is communicatively coupled to the client computing device via a radio access network;
• determine a device trust level for the client computing device based on the device attribute information indicative of the hardware component of the client computing device or the software environment of the client computing device, wherein the device trust level is indexed by the device attribute information;
• receive a request for access to an enterprise application from the client computing device;
• determine a data sensitivity level based on the requested enterprise application;
• determine a security policy based on the device trust level and the data sensitivity level;
• and
• send the security policy from the distributed network node to the client computing device.