Patent ID: 9055111
Filing Date: 2015-06-09
Classification: H04L

Abstract:
1. A method performed by data processing apparatus, the method comprising: receiving first user credentials from a user device during a login process that provides a user access to the user device; identifying, using the first user credentials, a first policy group for the user device and a second policy group for the user device in response to receiving the first user credentials from the user device during the login process; determining that the first policy group should be associated with the user device based on the receipt of the first user credentials during the login process; applying the first policy group to communications for the user device; receiving, from the user device, a request to access a resource; determining, using the first policy group, that the user device should be prevented from accessing the resource; providing, to the user device and based on determining that the user device should be prevented from accessing the resource, instructions for presentation of a user interface including a user credentials field; receiving second user credentials from the user device; determining that the second user credentials are the same as the first user credentials used during the login process; determining that the first policy group has a first priority that is lower than a second priority of the second policy group and that the second policy group applies to the request to access the resource, wherein a policy group with a higher priority is always selected over a policy group with a lower priority except during a login process when the higher priority policy group is flagged as not for use during the login process; determining, using the second policy group, that the user device should be allowed access to the resource; and allowing the user device access to the resource based on determining that the user device should be allowed access to the resource.