SECURITY FOR NETWORK DELIVERED SERVICES

摘要

A computer-implemented method for accessing a hosted service on client devices is described. The client devices include client software that uses a remotely delivered policy to redirect network requests for hosted services to a server to enforce visibility, policy and data security for network delivered services. The method can be used in conjunction with existing VPN and proxy solutions, but provides distinct additional functionality, particularly suited to corporate needs. Policies allow entities to centralize enforcement of service-specific restrictions across networks and communication channels, e.g. only certain users can download client records from a service—irrespective of the network used to access the service.

主权项

1. A computer-implemented method for accessing a hosted service on a client device, the method comprising:
receiving, on the client device from at least one server, a policy definition and a user identification, the policy definition comprised of a plurality of domain names; receiving on the client device a first request to access the hosted service, the first request including a first domain name; determining if the first domain name matches a domain name in the plurality of domain names; responsive to the determining, generating a second request on the client device, the second request comprising the first request rewritten for transmission to the server and comprising at least one of
including the user identification orusing the user identification to establish an encrypted communication path; and submitting the second request over the encrypted communication path; and receiving on the client a response from the server, the response comprising a response to the second request, the response sent by the server on behalf of the hosted service over the encryption communication path.