Patent ID: 9537900
Date: 2017-01-03
CPC Classifications: H04L

Claim:
1. A method comprising: intercepting, at one or more processors of an authentication system, an attempt by a user device to access an application served remotely from the user device; determining, at the one or more processors of the authentication system, a dynamic authentication context for the user device including one or more access credentials, wherein the dynamic authentication context includes a device capability; authenticating, at the one or more processors of the authentication system, the access credentials; determining, at the one or more processors of the authentication system, an indication of a need for a service-based policy, wherein the indication of a need for a service-based policy includes determining the user device is seeking to access the application served remotely from the user device; generating, at the one or more processors of the authentication system, a dynamic service-based policy based on the dynamic authentication context and an application, wherein the dynamic service-based policy includes an application normalized view of the device capability; providing, at the one or more processors of the authentication system, the dynamic service-based policy to the application, including the application normalized view of the device capability; determining, at the application, one or more features to be delivered from the remotely served application to the user device as part of an application session based on the dynamic authentication context and the application normalized view of the device capability; monitoring, at the one or more processors of the authentication system, for a change in the dynamic authentication context, wherein the change in the dynamic authentication context includes a change in the device capability; updating, at the one or more processors, the dynamic service-based policy to generate an updated dynamic service-based policy; and providing the updated dynamic service-based policy to the application without a request from the application for an updated dynamic service-based policy.