System and method for controlling configuration settings for mobile communication devices and services

• US 10,476,865 B2
• Filed: 01/31/2017
• Issued: 11/12/2019
• Est. Priority Date: 10/26/2001
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Godfrey, James A., Chiu, Denny K., Gao, Wen
• Primary Examiner(s): Wong, Warner
• Application Number:
  US15/420,171
• Publication Number:
  US 20170142091A1
• Time in Patent Office: 1,015 Days
• Field of Search: 370252, 709221, 709223
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/10 Multimedia information
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

A method, device and system for controlling a user device by a server. In one example, the user device comprises a plurality of applications, the method comprising: defining a set of application policy settings for the user device; and transmitting to the user device the application policy settings to control the management of at least one of the plurality of applications, wherein at least one of the application policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable.

Claims

1. A method for controlling, by a server, a mobile data communication device in a communication system, the mobile data communication device comprising a plurality of applications, comprising:

defining a set of policy settings for the mobile data communication device, wherein the set of policy settings controls one or more functions of the mobile data communication device; and

transmitting to the mobile data communication device the set of policy settings to control the management of at least one of the plurality of applications, at least one of the policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device, wherein the mobile data communication device is caused to automatically apply at least one setting of the at least one of the plurality of applications according to the transmitted set of policy settings upon receiving the set of policy settings from the server.

2. The method of claim 1, wherein the set of policy settings comprise one or more policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

3. The method of claim 2, including:

updating at least one policy setting;

transmitting the updated policy setting to the mobile data communication device.

4. The method of claim 3, further comprising:

storing the updated policy setting in a user information record associated with the mobile data communication device.

5. The method of claim 4, further comprising:

detecting the updated policy setting stored in the user information record and generating an update message including the updated policy setting in response to detecting the updated policy setting, wherein the updated policy setting is transmitted in the update message.

6. The method of claim 5, wherein the update message comprises an electronic mail message.

7. The method of claim 3, further comprising:

encrypting the updated policy setting;

generating an update message including the encrypted updated policy setting, wherein the encrypted updated policy setting is transmitted in the update message.

8. The method of claim 3, further comprising:

generating an update message including the updated policy setting, wherein the updated policy setting is transmitted in the update message.

9. A server, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the server to;

define a set of policy settings for a mobile data communication device in a communication system, the mobile data communication device comprising a plurality of applications, wherein the set of policy settings controls one or more functions of the mobile data communication device; and

transmit to the mobile data communication device the set of policy settings to control the management of at least one of the plurality of applications, at least one of the application policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device, wherein the mobile data communication device is caused to automatically apply at least one setting of the at least one of the plurality of applications according to the transmitted set pf policy settings upon receiving the set of policy settings from the server.

10. The server of claim 9, wherein the set of and the policy settings comprise one or more policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

11. The server of claim 9, the memory storing executable instructions that, when executed by the processor, cause the server to including:

update at least one policy setting;

transmit the updated policy setting to the mobile data communication device.

12. A non-transitory machine readable medium having tangibly stored therein executable instructions for execution by a processor of a server, wherein the executable instructions, when executed by the processor of the server, cause the processor to:

define a set of policy settings for a mobile data communication device in a communication system that comprises a plurality of applications, wherein the set of policy settings controls one or more functions of the mobile data communication device; and

transmit to the mobile data communication device the set of policy settings to control the management of at least one of the plurality of applications, at least one of the policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device, wherein the mobile data communication device is caused to automatically apply at least one setting of the at least one of the plurality of applications according to the transmitted set of policy settings upon receiving the set of policy settings from the server.

19. The non-transitory machine readable medium of claim 12, wherein the set of policy settings comprise one or more a policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

13. A method for controlling a mobile data communication device in a communication system, the mobile data communication device comprising a plurality of applications comprising, at the mobile data communication device:

receiving a set of policy settings from a server; and

automatically applying the policy settings to control the management of at least one of the plurality of applications upon receiving the set of policy settings from the server, at least one of the policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device.

14. The method of claim 13, wherein the set of policy settings comprise one or more policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

15. A mobile data communication device having a plurality of applications, comprising:

a processor;

a memory coupled to the processor, the memory storing executable instructions that, when executed by the processor, cause the mobile data communication device to;

receive a set of policy settings from a server; and

automatically apply the policy settings to control the management of at least one of the plurality of applications upon receiving the set of policy settings from the server, at least one of the policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device.

16. The device of claim 15, wherein the set of policy settings comprise one or more policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

17. A non-transitory machine readable medium having tangibly stored thereon executable instructions for execution by a processor of a mobile data communication device that comprises a plurality of applications, wherein the executable instructions, when executed by the processor of the mobile data communication device, cause the processor to:

receive a set of policy settings from a server; and

automatically apply the policy settings to control the management of at least one of the plurality of applications upon receiving the set of policy settings from the server, at least one of the policy settings controlling how at least one setting of the at least one of the plurality of applications may be configurable by a user of the mobile data communication device.

18. The device of claim 17, wherein the set of policy settings comprise one or more policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

20. The non-transitory machine readable medium of claim 17, wherein the set of policy settings comprise one or more a policy settings selected from the group comprising:

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device communication timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.