Ca, Inc.

Ca Technologies, Inc.

Dhiraj Girdhar

Brian Christopher Peck

Dhara Shah

Kevin Meehan

Dipto Chakravarty

Sandeep Kumar Ramnani

A first request and a first identifier corresponding to an identity of a first source device that initiated the first request is received. At least a second source device is queried to obtain information indicative of whether the first source device is authorized to complete the first request. The second source device is configured to periodically gather and transmit data, over one or more networks, to one or more local processing devices or one or more remote devices for data analysis. The first request is blocked or authorized to proceed based at least in part on whether at least the first source device is authorized to complete the first request.

Peer authentication by source devices

Techniques are disclosed relating to authenticating a client computer system to a server computer system. In some embodiments, a client computer system sends, to a server computer system, authentication information for an initial access request for one or more resources. This information may include authentication credentials and attributes that collectively identify the client computer system. In some embodiments, the client computer system receives, from the server computer system, an authentication response that indicates an initial authentication of the client computer system. In some embodiments, the authentication response includes a cryptographic key. While the initial authentication is valid, in some embodiments, the client computer system repeatedly re-authenticates for subsequent access requests. Each of the subsequent access request may include a single-use password generated using a cryptographic key and the attributes of the client computer system.

Continuous authentication

According to an embodiment of the present disclosure, a method by an electronic message server includes determining that an electronic message for delivery to a first user comprises sensitive content. Prior to transmitting the electronic message to a client device associated with the first user, the electronic message server requests at least one device attribute from the client device associated with the first user. The at least one device attribute is received from the client device associated with the user. Based on the at least one device attribute, the electronic message server masks the sensitive content such that the masked sensitive content is unreadable within the electronic message. The electronic message that includes the masked content that is unreadable within the electronic message is transmitted to the client device associated with the first user.

Intelligent, context-based delivery of sensitive email content to mobile devices

The proliferation of IOT devices has led to an increase in sensitive, cloud-stored data. To provide further protection, IOT device data may be secured by geographically based access controls as a supplement to or in place of traditional password protection. A geographically based access control restricts data accessibility to designated geographical areas. In this manner, a requesting device may not access geo-fence protected IOT device data unless the requesting device is located within a designated geographical area. Geo-fence parameters utilized for creation of a geo-fence policy may be pre-specified or generated based on operating conditions. For example, a user may provide location data, such as an address or geographical coordinate, and a radial distance from the location for which data access is permissible. Additionally, geo-fence parameters can be automatically determined based on criteria such as an IOT device type or data usage characteristics.

Growing community of inventors

Westborough, MA, United States of America

Dhiraj Girdhar