Application signature authorization
AssigneeSonicwall US Holdings Inc.
InventorsChemira Medappa, Christopher D. Peterson, David Telehowski
Life of this patent
Estimating the term…
Abstract
An appliance works in conjunction with an agent on a remote device to control application access to a corporate network. In conjunction with an SSL tunnel and policy operating at the appliance, granular application control may be implemented. In particular, a device user may determine what applications from a set of applications may access the corporate network and which applications do not access the network. The applications may be analyzed to determine whether the application is good or bad, as what security configurations, approvals and denials are associated with the application.
Claims21
(canceled)
A method for managing access to a computer network, the method comprising:
- storing information regarding one or more authorized applications in a data stored of a computing device within the computer network;
- receiving a signature of an application program sent from a user device to the computing device;
- identifying that an identifier of the application program and the signature matches the stored information in the data store of the computing device;
- and
- allowing information associated with the application program to be sent to one or more computers within the computer network.
The method of clam 5, wherein the classification of the user device indicates that the user device is a trusted user device, and further comprising storing the application identifier and the signature in the data store based on the user device being the trusted user device.
A non-transitory computer-readable storage medium having embodied thereon a program executable by a processor to implement a method for managing access to a computer network, the method comprising:
- storing information regarding one or more authorized applications in a data stored of a computing device within the computer network;
- receiving a signature of an application program sent from a user device to the computing device;
- identifying that an identifier of the application program and the signature matches the stored information in the data store of the computing device;
- and
- allowing information associated with the application program to be sent to one or more computers within the computer network.
The non-transitory computer-readable storage medium of clam 14, wherein the classification of the user device indicates that the user device is a trusted user device, and further comprising storing the application identifier and the signature in the data store based on the user device being the trusted user device.
An apparatus for managing access to a computer network, the apparatus comprising:
- a memory;
- and
- a processor that executes instructions out of the memory to:
- store information regarding one or more authorized applications in a data stored of a computing device within the computer network,
- receive a signature of an application program sent from a user device to the computing device,
- identify that an identifier of the application program and the signature matches the stored information in the data store of the computing device, and
- allow information associated with the application program to be sent to one or more computers within the computer network.
Dependencies are inferred from the claim text.