Patent ID: 9680873
Date: 2017-06-13
CPC Classifications: H04L,H04W

Claim:
1. A non-transitory computer-readable storage medium storing one or more sequences of instructions for dynamically determining how a device should process network access requests, which when executed by one or more processors, cause: enforcing a security constraint imposed upon virtual machines executing on the device that prevents said virtual machines from establishing a connection to an Internet Protocol (IP) address within a net block assigned to an Intranet, a software component rendering a judgment, based on a policy that weighs one or more factors, about whether the device is on a trusted network, wherein the policy interprets the device making a mutually authenticated connection with a network as support for deciding that the device is on a trusted network, and wherein the judgement is rendered against a network not previously identified as being trustworthy; upon rendering a judgment that the device is on the trusted network, allowing a network resource identified on a white list of trusted resources to be retrieved within a host operating system resident on the device; and upon rendering a judgment that the device is not on a trusted network, performing: