Lookout, Inc.

Varun Shimoga Prakash

Brian James Buck

Jeroen Martijn Wijdogen

Michael Joseph Mole

Pradeep Deepak Phatak

Praveen Kumar Mamnani

Kevin Lam

Dayyan Yoon Lord

Dhruva Gopal

Christopher Brandon Leach

Réda Zerrad

Sneha Sachidananda

Security policies are made dependent on location of a device and the location of a device is determined and the appropriate security policy applied without providing the device's location to a server. A device determine its location and identifies a security policy identifier mapped to a zone including the location. The device requests the security policy corresponding to the identifier from a server and implements it. The device may also store a database of the security policies and implement them according to its location. Devices registered for a user evaluate whether locations detected for the devices correspond to impossible travel by the user. Objects encoding geolocation data of a device may be encrypted with a private key of the device and the public key of another to prevent access by an intermediary server.

Use of geolocation to improve security while protecting privacy

An identity broker receives a request for access by a client device to a service provided by a server. In response to the request, the identity broker communicates with a client device to determine whether a security risk is associated with allowing the client device to access data of a service provider. If the client device is secure, the identity broker sends an authentication request to an identity provider. After the identity provider authenticates the client device, the identity broker passes the authentication to the server, which establishes a session with the client device to provide the service. The security state of the client continues to be monitored to determine whether access should continue to be permitted to data associated with a service provider.

Communicating with client device to determine security risk in allowing access to data of a service provider

An identity broker receives a request for access by a client device to a service provided by a server. In response to the request, the identity broker determines an identity of the client device using a client certificate. The identity broker also determines whether the client device is in a secure state. If the client device is secure, the identity broker sends an authentication request to an identity provider. After the identity provider authenticates the client device, the identity broker passes the authentication to the server, which establishes a session with the client device to provide the service.

Monitoring security of a client device to provide continuous conditional server access

Growing community of inventors

Fremont, CA, United States of America

Varun Shimoga Prakash