Enterprise access configuration

• US 20040117656A1
• Filed: 12/17/2002
• Published: 06/17/2004
• Est. Priority Date: 12/17/2002
• Status: Active Grant

• Current Assignee: Sierra Wireless Incorporated
• Original Assignee: Sierra Wireless Incorporated
• Inventors: Robert Tosey, Joseph Peter
• Granted Patent: US 7,251,823 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The present invention provides a solution in which a script containing general security parameters and access policies in a file is placed on an appropriate internal server. The location of the script may then be stored on an external server. When an end-user within the organization decides to purchase a wireless network device, he may attach it to his existing computer. The computer then may retrieve the security file location from the external server, retrieve the security file from the internal server using the security file location, and program the security file into the wireless device.

Claims

1. A method for configuring access from a wireless network device to an enterprise, comprising:

retrieving a security file location from a server external to the enterprise;

retrieving a security file from a server internal to the enterprise using said security file location;

programming said security file into the wireless network device; and

forwarding any remaining security parameters to the wireless network device.

2. The method of claim 1, further comprising:

retrieving a security file access protocol from said server external to the enterprise.

3. The method of claim 2, wherein said retrieving a security file further includes retrieving a security file from a server internal to the enterprise using said security file location and said security file access protocol.

4. The method of claim 1, further comprising:

receiving an email address from a user having the wireless network device; and

wherein said security file is unique to a domain covering said email address.

5. The method of claim 1, wherein said server internal to the enterprise is a web server.

6. The method of claim 1, wherein said server internal to the enterprise is a file server.

7. The method of claim 1, wherein said server internal to the enterprise is a database server.

8. The method of claim 1, further comprising:

receiving communication from said wireless network device to an access server internal to the enterprise, the communication sent using a configuration stored in said security file.

9. The method of claim 8, wherein said access server is an email server.

10. The method of claim 8, wherein said access server is a push messaging server.

11. The method of claim 8, wherein said access server is an instant messaging server.

12. The method of claim 8, wherein said access server is an intranet web browsing server.

13. The method of claim 8, wherein said access server is an intranet file access server.

14. The method of claim 8, wherein said access server is an intranet application access server.

15. The method of claim 8, wherein said access server is a virtual private network (VPN) access server.

16. The method of claim 8, wherein said access server is a VPN key distribution server.

17. A method for accessing an enterprise from a wireless network device by using a computer, comprising:

retrieving a security file location from a server external to the enterprise;

retrieving a security file from a server internal to the enterprise using said security file location;

coupling the wireless network device to the computer; and

programming said security file into the wireless network device.

18. The method of claim 17, further comprising:

retrieving a security file access protocol from said server external to the enterprise.

19. The method of claim 18, wherein said retrieving a security file further includes retrieving a security file from a server internal to the enterprise using said security file location and said security file access protocol.

20. The method of claim 17, further comprising:

forwarding any remaining security parameters to the wireless network device.

21. The method of claim 17, further comprising:

sending an email address from a user having the wireless network device to a server internal to the enterprise.

22. The method of claim 17, further comprising:

sending communication from the wireless network device to an access server internal to the enterprise, the communication sent using a configuration stored in said security file.

23. An apparatus for configuring access from a wireless network device to an enterprise, comprising:

a security file location external server retriever;

a security file internal server retriever coupled to said security file location external server retriever;

a security file wireless network device programmer coupled to said security file internal server retriever; and

a remaining security parameters wireless network device forwarder coupled to said security file internal server retriever.

24. The method of claim 23, further comprising a security file access protocol retriever coupled to said security file internal server retriever.

25. An apparatus for configuring access from a wireless network device to an enterprise, comprising:

means for retrieving a security file location from a server external to the enterprise;

means for retrieving a security file from a server internal to the enterprise using said security file location;

means for programming said security file into the wireless network device; and

means for forwarding any remaining security parameters to the wireless network device.

26. The apparatus of claim 25, further comprising:

means for retrieving a security file access protocol from said server external to the enterprise.

27. The apparatus of claim 26, wherein said means for retrieving a security file further includes means for retrieving a security file from a server internal to the enterprise using said security file location and said security file access protocol.

28. The apparatus of claim 25, further comprising:

means for receiving an email address from a user having the wireless network device; and

means for wherein said security file is unique to a domain covering said email address.

29. The apparatus of claim 25, wherein said server internal to the enterprise is a web server.

30. The apparatus of claim 25, wherein said server internal to the enterprise is a file server.

31. The apparatus of claim 25, wherein said server internal to the enterprise is a database server.

32. The apparatus of claim 25, further comprising:

means for receiving communication from said wireless network device to an access server internal to the enterprise, the communication sent using a configuration stored in said security file.

33. The apparatus of claim 32, wherein said access server is an email server.

34. The apparatus of claim 32, wherein said access server is a push messaging server.

35. The apparatus of claim 32, wherein said access server is an instant messaging server.

36. The apparatus of claim 32, wherein said access server is an intranet web browsing server.

37. The apparatus of claim 32, wherein said access server is an intranet file access server.

38. The apparatus of claim 32, wherein said access server is an intranet application access server.

39. The apparatus of claim 32, wherein said access server is a virtual private network (VPN) access server.

40. The apparatus of claim 32, wherein said access server is a VPN key distribution server.

41. An apparatus for accessing an enterprise from a wireless network device by using a computer, comprising:

means for retrieving a security file location from a server external to the enterprise;

means for retrieving a security file from a server internal to the enterprise using said security file location;

means for coupling the wireless network device to the computer; and

means for programming said security file into the wireless network device.

42. The apparatus of claim 41, further comprising:

means for retrieving a security file access protocol from said server external to the enterprise.

43. The apparatus of claim 42, wherein said means for retrieving a security file further includes means for retrieving a security file from a server internal to the enterprise using said security file location and said security file access protocol.

44. The apparatus of claim 41, further comprising:

means for forwarding any remaining security parameters to the wireless network device.

45. The apparatus of claim 41, further comprising:

means for sending an email address from a user having the wireless network device to a server internal to the enterprise.

46. The apparatus of claim 41, further comprising:

means for sending communication from the wireless network device to an access server internal to the enterprise, the communication sent using a configuration stored in said security file.

47. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for configuring access from a wireless network device to an enterprise, comprising:

retrieving a security file location from a server external to the enterprise;

retrieving a security file from a server internal to the enterprise using said security file location;

programming said security file into the wireless network device; and

forwarding any remaining security parameters to the wireless network device.

48. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for accessing an enterprise from a wireless network device by using a computer, comprising:

retrieving a security file location from a server external to the enterprise;

retrieving a security file from a server internal to the enterprise using said security file location;

coupling the wireless network device to the computer; and

programming said security file into the wireless network device.