US 12,407,736 B2
Dynamically enforcing security policies on client devices using a device identity entity and a security policy enforcement entity
Sachin Dinkar Wakudkar, St-Sulpice (CH); Roberto Muccifora, Ropraz (CH); Fnu Sandesh, Hunsur (IN); and Shiva Prasad Maheshuni, Bangalore (IN)
Assigned to Cisco Technology, Inc., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on Jun. 25, 2024, as Appl. No. 18/753,432.
Application 18/753,432 is a continuation of application No. 17/487,260, filed on Sep. 28, 2021, granted, now 12,047,420.
Prior Publication US 2024/0348662 A1, Oct. 17, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/20 (2013.01) [H04L 63/102 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method comprising:
receiving, at an identity provider from a device identity entity, an application access request by a client device to access a cloud network via an application over an access network, wherein the application access request includes (i) credentials related to an identity of the client device from the device identity entity and (ii) a user identification (ID) related to the application;
based at least in part on the credentials, retrieving, by the identity provider, security policies associated with a user associated with the user ID;
generating, by the identity provider, a tag for the client device, wherein the security policies are associated with the tag;
forwarding, by the identity provider to a security policy enforcement entity of the cloud network, the tag and associated security policies;
forwarding, by the identity provider to the device identity entity, the tag;
receiving, by the security policy enforcement entity from a controller of the access network, an access request associated with the client device to access the cloud network, wherein the access request includes the tag added to the access request by the controller of the access network; and
based at least in part on the tag, enforcing, by the security policy enforcement entity, the security policies associated with the user while the client device accesses the cloud network.