SyncML based OMA connectivity object to provision VPN connections

• US 20060212937A1
• Filed: 02/18/2005
• Published: 09/21/2006
• Est. Priority Date: 02/18/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Natarajan, Sureshkumar
• Granted Patent: US 7,577,130 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

Mobile devices are provisioned automatically with VPN (Virtual Private Network) information so that users can automatically connect to their corporate networks using their devices. The OMA SyncML standard is extended to define VPN connections and provision them onto the devices automatically either over-the-air or by an IT application provided by the corporation.

Claims

1. A method for defining VPN connections for a mobile device, comprising:

creating a VPN definition;

incorporating the VPN definition into an OMA object; and

provisioning the mobile device with a VPN connection using the OMA object that creates a secure tunnel from the mobile device to a network.

2. The method of claim 1, wherein the OMA object further comprises using an XML schema.

3. The method of claim 1, wherein provisioning the mobile device with the VPN connection occurs automatically.

4. The method of claim 1, wherein provisioning the mobile device with the VPN connection further comprises loading a SIM card with the VPN connection.

5. The method of claim 2, wherein incorporating the VPN definition into the OMA object further comprises extending an XML structure to define the VPN connection.

6. The method of claim 5, wherein provisioning the mobile device further comprises using a wireless connection to automatically provision the mobile device.

7. The method of claim 6, wherein the provisioning the mobile device further comprises using an application to provision the mobile device.

8. The method of claim 2, wherein creating the VPN definition further comprises creating a stand-alone characteristic associated with the XML schema.

9. The method of claim 2, wherein creating the VPN definition further comprises extending an existing characteristic associated with the XML schema.

10. A system for provisioning VPN information associated with a mobile device, comprising:

a server configured to maintain data relating to the VPN information, wherein the VPN information is incorporated into an OMA object; and

a mobile device coupled to the server and configured to receive the VPN information enabling the mobile device to communicate with a network through a secure tunnel.

11. The system of claim 10, wherein the mobile device is bootstrapped with the VPN information.

12. The system of claim 11, wherein the mobile device further comprises a SIM card that is provisioned with the VPN information.

13. The system of claim 10, wherein the server is further configured to transfer the VPN information to the mobile device.

14. The system of claim 11, wherein the mobile device is further configured to receive updated VPN information based on determined network connections.

15. The system of claim 10, wherein the VPN information incorporated into the OMA object further comprises extending a OMA object structure to define the VPN information.

16. The system of claim 10, wherein the VPN information incorporated into the OMA object further comprises creating a stand-alone characteristic associated with the OMA object.

17. A computer-readable medium for automatically provisioning a mobile device with VPN information, comprising:

creating a VPN definition;

incorporating the VPN definition into an OMA object; and

provisioning the mobile device with a VPN connection using the OMA object that creates a secure tunnel from the mobile device to a network.

18. The computer-readable medium of claim 17, wherein provisioning the mobile device with the VPN connection further comprises loading a SIM card with the VPN connection.

19. The computer-readable medium of claim 17, wherein creating the VPN definition further comprises creating a stand-alone characteristic associated with the OMA object.

20. The computer-readable medium of claim 17, wherein creating the VPN definition further comprises extending an existing characteristic associated with the OMA object.