US 2020/0028960 A1Published application

Providing on-demand access to a restricted resource of a user device

AssigneeVMware, Inc.

InventorsGaurav Verma, Manjunath Subramani, Suchit Shivashankar, Karthikeyan Palanisamy

Life of this patent

Estimating the term…

Loading patent…

Abstract

Examples described herein include systems and methods for providing on-demand access to a restricted resource of a user device. An example method can include generating a profile that specifies a restricted resource and one or more conditions for that resource to be de-restricted. The profile can be sent to, and utilized by, an agent application executing on the user device. The agent application can determine that a user is requesting de-restriction of a resource and determine whether all applicable conditions are met. If the conditions are met, the agent application can de-restrict the resource. After the resource is used, the agent application can report details of the use to an administrator or management server.

Claims20

Dependent claims

A method for providing on-demand access to restricted resources of a user device, comprising:

generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource;
and
a communication preference to notify at least one of a respective user and an administrator with de-restriction information associated with at least one of a de-restriction request and a restricted resource usage;
and
causing the profile to be transmitted to the user device, the user device executing an agent application on the user device that:
determines that a user of the user device is requesting a de-restriction of the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device and imposes the usage limitation;
transmits a first notification to the management server regarding the de-restriction, the first notification including information regarding an actual usage of the restricted resource during a period of the de-restriction;
and
causes, based on the communication preference, a second notification to include specified usage information and be transmitted to a destination.

11 more elements

A non-transitory, computer-readable medium comprising instructions that, when executed by a processor of a computing device, cause the computing device to perform stages for providing on-demand access to restricted resources of a user device, the stages comprising:

generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource;
and
a communication preference to notify at least one of a respective user and an administrator with de-restriction information associated with at least one of a de-restriction request and a restricted resource usage;
and
causing the profile to be transmitted to the user device, the user device executing an agent application on the user device that:
determines that a user of the user device is requesting de-restriction of the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device and imposes the usage limitation;
transmits a first notification to the management server regarding the de-restriction, the first notification including
information regarding an actual usage of the restricted resource during a period of the de-restriction;
and
causes, based on the communication preference, a second notification to include specified usage information and be transmitted to a destination.

12 more elements

A system for providing on-demand access to restricted resources of a user device, comprising

a computing device comprising a processor;
a memory store comprising a non-transitory, computer-readable medium having instructions that, when executed by the processor, cause the processor to perform stages comprising:
generating a profile at a management server, the profile specifying:
a restricted resource of the user device;
a condition for the restricted resource to be de-restricted;
a usage limitation including at least one of a time limit on de-restricted use and a limit on permitted implementations of the restricted resource;
and
a communication preference to notify at least one of a respective user and an administrator with de-restriction information associated with at least one of a de-restriction request and a restricted resource usage;
and
causing the profile to be transmitted to the user device, the user device an agent application on the user device that:
determines that a user of the user device is requesting de-restriction of the restricted resource;
confirms that the condition is satisfied;
de-restricts the restricted resource on the user device;
transmits a first notification to the management server regarding the de-restriction, the first notification including information regarding an actual usage of the restricted resource during a period of the de-restriction;
and
causes, based on the communication preference, a second notification to include specified usage information and be transmitted to a destination.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 16/038,458Filed 18 Jul 2018
Published: 23 Jan 2020
Term ends: Not estimatedThe source records don’t support an estimate.

Classification13 codes

H04W 48/02
Access restriction ; Network selection; Access point selection: access restriction performed under specific conditions
H04W 48/04
Access restriction performed under specific conditions: based on user or terminal location or mobility data, e.g. moving direction, speed
H04L 63/108
For controlling access to devices or network resources: when the policy decisions are valid for a limited amount of time
H04L 67/306
Profiles: user profiles