# US 8,789,144 B2 · Mediating resource access based on a physical location of a mobile device

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 8,789,144 B2
- Document ID: US8789144B2
- Status: Granted
- Kind: B2
- Application number: 13/267,031
- Filed: 2011-10-06
- Published: 2012-04-26
- Granted: 2014-07-22
- Earliest claimed: 2010-10-06
- Assignees: Citrix Systems, Inc.
- Applicants: Richard Mazzaferri; Martin Duursma; Donovan Hackett; Lee Laborczfalvi
- Inventors: Richard Mazzaferri; Martin Duursma; Donovan Hackett; Lee Laborczfalvi
- Web page: https://patentgrep.com/patent/US8789144B2

## CPC

- H04L 63/10: {for controlling access to devices or network resources}
- G06F 3/0481: based on specific properties of the displayed interaction object or a metaphor-based environment, e.g. interaction with desktop elements like windows or icons, or assisted by a cursor's changing behaviour or appearance
- G06F 21/10: Protecting distributed programs or content, e.g. vending or licensing of copyrighted material (protection in video systems or pay television H04N7/16) {; Digital rights management [DRM]}
- G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- G06F 2221/2111: Location-sensitive, e.g. geographical location, GPS
- G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)

## Abstract

One or more techniques are provided for causing a location of a screen image associated with a resource to be adjusted on a display device. The adjustment may be based at least in part on determining that a control element receives focus. The resource may be associated with an application, such as an email application that may be hosted remotely from a client device. Access to one or more resources may be controlled or mediated. Access rights may be based at least in part on a determination of a geographic location of a client device. When the client device is located in a safe area, the client device may be provided access to the resource. When the client device is not located in a safe area, the client device might not be provided access to the resource or might not be provided full access to the resource.

## Claims

### Claim 1

A method comprising:
executing, by a first computing device, an application on behalf of a second computing device;
receiving information indicating a location of the second computing device;
determining that the location of the second computing device is a safe location by at least comparing the location of the second computing device to at least one of one or more authorized locations in which access to one or more e-mails is authorized, wherein the one or more e-mails includes an indication of the one or more authorized locations; and
responsive to determining that the location of the second computing device is a safe location, providing, by the first computing device, the second computing device with access to the one or more e-mails in connection with execution of the application and transmitting application output data indicative of the one or more e-mails to the second computing device.

### Claim 2 (depends on 1)

The method of claim 1, wherein the application output data indicative of the one or more e-mails includes draw commands and images generated by the application.

### Claim 3 (depends on 1)

The method of claim 1, further comprising:
providing, by the first computing device, access to one or more remote files subject to the second computing device being within one or more additional authorized locations in which access to the one or more remote files is authorized.

### Claim 4 (depends on 1)

The method of claim 1, further comprising:
receiving, at the first computing device, information indicating a second location of the second computing device;
determining that the second location of the second computing device is an unsafe location; and
responsive to determining that the second location of the second computing device is an unsafe location, restricting access to the one or more e-mails.

### Claim 5 (depends on 4)

The method of claim 4, further comprising:
transmitting graphical or audio data to the second computing device indicating that access to the one or more e-mails is restricted.

### Claim 6 (depends on 4)

The method of claim 4, further comprising:
causing one or more indications of the one or more e-mails to be removed from a display screen associated with the second computing device responsive to restricting access to the one or more e-mails.

### Claim 7 (depends on 1)

The method of claim 1, wherein the information indicating the location of the second computing device includes GPS location information of the second computing device.

### Claim 8 (depends on 1)

The method of claim 1, wherein determining that the location of the second computing device is a safe location includes determining that the location of the second computing device is within a threshold distance of the at least one of the one or more authorized locations.

### Claim 9 (depends on 1)

The method of claim 1, wherein the indication of the at least one of the one or more authorized locations includes an indication of at least one location in which a recipient of the one or more e-mails is authorized to access the one or more e-mails.

### Claim 10

An apparatus, comprising:
a processor; and
memory storing executable instructions that, when executed by the processor, cause the apparatus to:
execute an application on behalf of a computing device,
receive information indicating a location of the computing device,
determine that the location of the computing device is a safe location by at least comparing the location of the computing device to at least one of one or more authorized locations in which access to one or more e-mails is authorized, wherein the one or more e-mails includes an indication of the one or more authorized locations, and
responsive to determining that the location of the computing device is a safe location, provide the computing device with access to the one or more e-mails in connection with execution of the application and transmit application output data indicative of the one or more e-mails to the computing device.

### Claim 11 (depends on 10)

The apparatus of claim 10, wherein the application output data indicative of the one or more e-mails includes draw commands and images generated by the application.

### Claim 12 (depends on 10)

The apparatus of claim 10, wherein the executable instructions, when executed by the processor, cause the apparatus to:
provide access to one or more remote files subject to the computing device being within one or more additional authorized locations in which access to the one or more remote files is authorized.

### Claim 13 (depends on 10)

The apparatus of claim 10, wherein the executable instructions, when executed by the processor, cause the apparatus to:
receive information indicating a second location of the computing device,
determine that the second location of the computing device is an unsafe location, and
responsive to determining that the second location of the computing device is an unsafe location, restrict access to the one or more e-mails.

### Claim 14 (depends on 13)

The apparatus of claim 13, wherein the executable instructions, when executed by the processor, cause the apparatus to:
transmit graphical or audio data to the computing device indicating that access to the one or more e-mails is restricted.

### Claim 15 (depends on 13)

The apparatus of claim 13, wherein the executable instructions, when executed by the processor, cause the apparatus to:
cause one or more indications of the one or more e-mails to be removed from a display screen associated with the computing device responsive to restricting access to the one or more e-mails.

### Claim 16 (depends on 10)

The apparatus of claim 10, wherein the information indicating the location of the computing device includes GPS location information of the computing device.

### Claim 17 (depends on 10)

The apparatus of claim 10, wherein determining that the location of the computing device is a safe location includes determining that the location of the computing device is within a threshold distance of the at least one of the one or more authorized locations.

### Claim 18

A method comprising:
executing, by a first computing device, a first application on behalf of a second computing device;
executing, by the first computing device, a second application on behalf of a third computing device;
receiving information indicating a location of the second computing device;
determining that the location of the second computing device is a safe location at least by comparing the location of the second computing device to at least one of one or more authorized locations in which access to a first set of e-mails is authorized, wherein the first set of e-mails includes an indication of the one or more authorized locations;
responsive to determining that the location of the second computing device is a safe location, providing, based at least in part on a consumption of a first license, the second computing device with access to the first set of e-mails in connection with the first application and transmitting application output data indicative of the first set of e-mails to the second computing device;
receiving information indicating a location of third computing device;
determining that the location of the third computing device is a safe location; and
responsive to determining that the location of the third computing device is a safe location, providing, based at least in part on a consumption of a second license, the third computing device with access to a second set of e-mails in connection with execution of the second application and transmitting application output data indicative of the second set of e-mails to the third computing device,
wherein the first license is associated with a first usage-based charge different from a second usage-based charge associated with the second license.