Apparatus and method for managing security policy information using a device management tree

• US 20060143179A1
• Filed: 12/29/2004
• Published: 06/29/2006
• Est. Priority Date: 12/29/2004
• Status: Abandoned Application

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Klots, Boris, Bruner, John D., Draluk, Vadim, Kaimal, Biju R.
• Application Number:
  US11/025,159
• Publication Number:
  US 20060143179A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A client device (701) of a communication system (700) includes, for example, a processor (304) programmed to include a device management tree wherein the processor is operative to receive security policy information (1000), such as that associated with a non-server entity, such as an application on the device, for example, and updates the device management tree with the received security policy information (1002). The device management tree is then accessed in response to a security policy access request, such as from a application or other non server entity during runtime of the wireless client device (1004). As such, not only does the device management tree include external security policy subjects, such as server identities, but different internal security policy subjects are also used to configure a device management tree with suitable security policy enforcement information.

Claims

1. A method for a client device of a communication system comprising:

receiving security policy information for a client device;

updating the device management tree with the received security policy information; and

accessing the device management tree in response to a security policy information access request.

2. The method of claim 1 wherein receiving security information for a client device includes evaluating a digital certificate for the security policy information and mapping the security policy information from the digital certificate into the device management tree.

3. The method of claim 1 wherein receiving security policy information for a client device includes obtaining a security policy file and mapping the contents of the security policy file into a hierarchical device management tree structure.

4. The method of claim 1 wherein accessing the DMT includes accessing the DMT based on an access control list.

5. The method of claim 1 including accessing the DMT during runtime to utilize the security policy information.

6. The method of claim 1 wherein updating the DMT with security policy information includes storing hierarchical data representing a subject type other than a management server identifier in the DMT.

7. The method of claim 3 wherein the security policy file includes data representing subject type data representing at least one of:

OSGi bundle logical identification data;

an OSGi bundle signer;

a wireless carrier identifier; and

an SIM subscription identifier.

8. A wireless client device comprising:

a wireless transceiver;

a processor, operatively coupled to the wireless transceiver; and

memory, operatively coupled to the processor, containing executable instructions that when executed by the processor, cause the processor to;

provide a device management engine and corresponding device management tree;

receive security policy information for a client device;

update the device management tree with the received security policy information; and

access the device management tree in response to a security policy information access request.

9. The wireless client device of claim 8 wherein receiving the security information includes evaluating a digital certificate for the security policy information and mapping the security policy information from the digital certificate into the device management tree.

10. The wireless client device of claim 8 wherein receiving the security policy information for the client device includes obtaining a security policy file and mapping the contents of the security policy file into a hierarchical device management tree structure.

11. The wireless client device of claim 8 wherein accessing the DMT includes accessing the DMT based on an access control list containing the security policy information.

12. The wireless client device of claim 8 wherein accessing the DMT includes accessing the DMT by a plurality of local applications during runtime to utilize the security policy information.

13. The wireless client device of claim 8 wherein updating the DMT with policy information includes storing hierarchical data representing a subject type other than a management server identifier in the DMT.

14. The wireless client device of claim 10 wherein the security policy file includes data representing subject type data representing at least one of:

OSGi bundle logical identification data;

an OSGi bundle signer;

a wireless carrier identifier; and

an SIM subscription identifier.