Patent Document ID: 10129257
Application ID: 15234779
Patent Flag: 1

Claim One:
1. A method comprising: determining, by an authorization server, a policy that defines a restricted action for a first endpoint device, wherein the policy is based on monitoring of a location of a second endpoint device by a first enterprise server, wherein the monitoring of the location of the second endpoint device is based on monitoring a different action, including changing a wireless network connection status of the second device, than the restricted action, wherein the first and second endpoint devices are different but are associated with a same user; generating, by the authorization server, a rule set for a second enterprise server based on the policy that is based on the monitoring by the first enterprise server, wherein the restricted action includes accessing one or more assets associated with a particular location, wherein the second enterprise server provides access to the one or more assets; and distributing, by the authorization server, the rule set to the second enterprise server, wherein the rule set is usable by the second enterprise server to grant or deny requests to perform the restricted action based on whether the location of the second endpoint device indicated by the monitoring of the first enterprise server is within a threshold distance from the particular location at which the first endpoint device is being used to attempt access to the one or more assets.