End point context and trust level determination

摘要

A server device is configured to receive, from a proxy server, a request by a user device to access a network; obtain information associated with the user device that includes an identifier associated with the user device and context information associated with the user device; determine a level of trust associated with the user device based on the identifier and the context information, where the level of trust is a measure of security risk associated with the user device; generate an access token based on the level of trust, where the access token identifies a level at which the user device is authorized to access the network; and send, to the user device via the proxy server, the access token that enables the proxy server to authorize the user device to access the network at the level identified by the access token.

主权项

1. A method performed by a server device, the method comprising:
receiving, by the server device and from a proxy server, a request, by a user device, to access a network associated with the server device; obtaining, by the server device and in response to the request, information associated with the user device, including:
obtaining, from the request, all or fewer than all of one or more identifiers associated with the user device,retrieving, from another server device, all or a portion of context information associated with the user device, andsending, to the user device, a query to obtain more of the one or more identifiers or the context information when a quantity of the one or more identifiers or the context information, obtained from the request or retrieved from the other server device, is less than a threshold; determining, by the server device, a level of trust associated with the user device based on the one or more identifiers and the context information, where the level of trust is a measure of security risk associated with each of the one or more identifiers and the context information; generating, by the server device, an access token based on the level of trust, where the access token identifies a level at which the user device is authorized to access the network; and sending, by the server device and to the user device via the proxy server, the access token, where the access token enables the proxy server to authorize the user device to access the network at the level identified by the access token.