Max He

US Patent:

8397287, Mar 12, 2013

Filed:

Aug 21, 2006

Appl. No.:

11/465915

Inventors:

Amarnath Mullick - Bangalore, IN
Shashi Nanjundaswamy - Bangalore, IN
Ajay Soni - San Jose CA, US
Charu Venkatraman - Bangalore, IN
Max He - Saratoga CA, US

Assignee:

Citrix Systems, Inc. - Fort Lauderdale FL

International Classification:

G06F 17/00

US Classification:

726 15, 726 3, 726 27, 713153

Abstract:

An appliance and method for authorizing a level of access of a client to a virtual private network connection, based on a client-side attribute includes the step of establishing, by an appliance, a control connection with a client upon receiving a client request to establish a virtual private network connection with a network. The appliance transmits, via the control connection, a request to the client to evaluate at least one clause of a security string, the at least one clause including an expression associated with a client-side attribute. The client transmits, via the control connection, a response to the appliance comprising a result of evaluating the at least one clause by the client. The appliance assigns the client to an authorization group based on the result of evaluation of the at least one clause.

US Patent:

20070245409, Oct 18, 2007

Filed:

Dec 5, 2006

Appl. No.:

11/566975

Inventors:

James Harris - San Jose CA, US
Max He - Saratoga CA, US
Arkesh Kumar - Santa Clara CA, US
Ajay Soni - San Jose CA, US
Charu Venkatraman - Bangalore, IN
Shashi Najundaswamy - Bangalore, IN
Amarnath Mullick - Bangalore, IN

International Classification:

H04L 9/32

US Classification:

726 5

Abstract:

The present invention relates to systems and methods to identify a level of access for a resource being accessed via a secure socket layer virtual private network (SSL VPN) connection to a network, and to control the action on the resource based on the identified level of access. The appliance described herein provides intelligent secure access and action control to resources based on a sense and respond mechanism. When a user requests access to a resource via the SSL VPN connection of the appliance, the appliance obtains information about the client to determine the user access scenario—the location, device, connection and identify of the user or client. Based on the collected information, the appliance responds to the detected user scenario by identifying a level of access to the resource for the user/client, such as rights to view, print, edit or save a document, Based on the identified level of access, the appliance controls the actions performs on the resource by various techniques described herein so that the user can only perform the allowed action n accordance with the level of access. As such, the present invention allows organization to control and provide the appropriate level of access to valuable, confidential or business critical information accessed remotely or via a pubic network while protecting such information by controlling the types of actions performed or allowed to be performed remotely on the information.