Systems and methods for identifying a secure application when connecting to a network
AssigneeSymantec Corporation
InventorsMichael Adler, Thomas Jeffrey Enderwick, Robert Koeten, Nicolas Popp
Life of this patent
Estimating the term…
Abstract
A computer system receives, from a user device, a request to access a resource within a network of an organization and receives access credentials associated with an application, a user and the user device. The computer system identifies an application identifier, a user identifier and a device identifier and determines whether the combination of these identifiers satisfies an access policy. If the combination of application identifier, user identifier and device identifier satisfies the access policy, then the computer system grants the application access to the resource within the network of the organization.
Claims20
A method comprising:
- receiving a request of an application to access a resource within a network of an organization, wherein the application is running on a user device outside of the network of the organization;
- identifying a user identifier of a user of the application, a device identifier of the user device, an application identifier of the application, and an authentication token, wherein the user identifier, the device identifier, the application identifier and the authentication token are each associated with the request;
- determining, by a processor, whether a combination of the user identifier, the device identifier, the application identifier and the authentication token satisfies an access policy;
- and
- granting the application access to the resource within the network of the organization if the combination of the user identifier, the device identifier, the application identifier and the authentication token satisfies the access policy.
A system, comprising:
- an access proxy having a memory, and a processor, coupled with the memory, to:
- receive a request of an application to access a resource within a network of an organization, wherein the application is running on a user device outside of the network of the organization;
- identify a user identifier of a user of the application, a device identifier of the user device, an application identifier of the application, and an authentication token, wherein the user identifier, the device identifier, the application identifier and the authentication token are each associated with the request;
- determine whether a combination of the user identifier, the device identifier, the application identifier and the authentication token satisfies an access policy;
- and
- grant the application access to the resource within the network of the organization if the combination of the user identifier, the device identifier, the application identifier and the authentication token satisfies the access policy.
A non-transitory computer readable storage medium including instructions that, when executed by a processor, cause the processor to perform operations comprising:
- receiving a user request to launch an application to access a cloud resource;
- obtaining access credentials for the application, the access credentials comprising a user identifier, a device identifier, and an application identifier;
- sending an access request that comprises the access credentials, an authentication token, and an identifier of the cloud resource to an access proxy via a network;
- and
- receiving a response to the access request from the access proxy, the response indicating whether the access request has been granted or denied.
Dependencies are inferred from the claim text.