Using a requestor identity to enforce a security policy on a network connection that conforms to a shared-access communication protocol

A method of using a requestor identity to enforce a security policy on a network connection that conforms to a shared-access communication protocol, the method implemented by a driver that runs on a computing system, the method comprising:

• receiving a request,
• the request requesting creation of the network connection between the computing system and a target network resource,
• the network connection conforming to a communication protocol that is configured to provide shared access to network resources;
• associating the network connection with the requestor identity, which identifies a requesting entity associated with the request, by associating the request with the requestor identity and further by associating the network connection with the request;
• determining whether the requesting entity is authorized to access the target network resource based at least in part on a permission that is indicated by the security policy;
• and
• based at least in part on the permission indicating that the requesting entity is authorized to access the target network resource, creating the network connection between the computing system and the target network resource.

A computer program product comprising a computer-readable storage medium having instructions recorded thereon for enabling a processor-based system to use a requestor identity to enforce a security policy on a network connection that conforms to a shared-access communication protocol by performing operations, the operations comprising:

• receiving a request,
• the request requesting creation of the network connection between the processor-based system and a target network resource,
• the network connection conforming to a communication protocol that is configured to provide shared access to network resources;
• associating the network connection with the requestor identity, which identifies a requesting entity associated with the request, by associating the request with the requestor identity and further by associating the network connection with the request;
• determining whether the requesting entity is authorized to access the target network resource based at least in part on a permission that is indicated by the security policy;
• and
• based at least in part on the permission indicating that the requesting entity is authorized to access the target network resource, creating the network connection between the processor-based system and the target network resource.