Controlling enterprise access by mobile devices

摘要

A system comprising at least one component running on at least one server and receiving vulnerability data and, for each device of a plurality of devices, device data that includes data of at least one device component. The system includes a trust score corresponding to each device of the plurality of devices and representing a level of security applied to the device. The trust score is generated using a severity of the vulnerability data. The system includes an access control component coupled to the at least one component and controlling access of the plurality of devices to an enterprise using the trust score.

主权项

1. A system comprising:
at least one component running on at least one server and receiving device data for a plurality of devices and generating from the device data configuration data of processing components hosted on the device; wherein the at least one component receives vulnerability data of a national database comprising a plurality of vulnerabilities of the processing components, wherein each vulnerability includes a severity rating; wherein the at least one component generates a mapping of the vulnerability data to the configuration data of each device; and wherein the at least one component selects for each device of the plurality of devices a set of the processing components and calculates for the set a trust score, wherein the calculating comprises calculating for each vulnerability of each processing component a vulnerability trust score that is proportional to the severity rating of each vulnerability, and calculating the trust score by combining the vulnerability trust score of each vulnerability, wherein access by each device to an enterprise is granted based on the trust score.