Client architecture for portable device with security policies

• US 20060236363A1
• Filed: 09/23/2002
• Published: 10/19/2006
• Est. Priority Date: 09/23/2002
• Status: Active Grant

• Current Assignee: Dell Marketing LP (Dell Technologies Inc.)
• Original Assignee: Credant Technologies Incorported (Dell Technologies Inc.)
• Inventors: Mann, Dwayne R., Burchett, Christopher D., Gordon, Ian R., Heard, Robert W.
• Granted Patent: US 7,437,752 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3228 One-time or temporary data, i.e. information which is sent for every authentication or authorization, e.g. one-time-password, one-time-token or one-time-key
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/0433 Key management protocols
• CPC Class Codes: H04W 12/08 Access security

Abstract

In a particular embodiment, a client module is deployed on a wireless device. The client module comprises a policy database including a list of authorized devices to which the wireless device may communicate. In another embodiment, the client module comprises a policy database including at least two user profiles on a wireless device, such as a personal profile and a business profile.

Claims

1. A client module deployed on a wireless device, comprising:

a policy database included in a client module deployed on a wireless device, the policy database including a list of authorized devices to which the wireless device can communicate.

2. The client module of claim 1, wherein the list of authorized devices contains at least one of a network access node and a mobile wireless device.

3. The client module of claim 1, further comprising an intelligent agent for authenticating the authorized devices.

4. The client module of claim 1, further comprising key materials stored in a memory within the wireless device.

5. The client module of claim 4, wherein the key material includes a root key and a plurality of operating keys.

6. The client module of claim 5, wherein the plurality of operating keys include a data key, a policy key, and a log file key.

7. The client module of claim 4, wherein the key material is encrypted.

8. The client module of claim 7, wherein the key material is encrypted using a personal identification number, a user password, and a user phrase.

9. The client module of claim 4, further comprising a policy pack stored in the memory, the policy pack including security policies that are encrypted using the policy key.

10. A client module deployed on a wireless device, comprising:

a policy database containing at least two user profiles on the wireless device.

11. The client module of claim 10, wherein the at least two user profiles include a personal profile and a business profile.

12. A client module deployed on a wireless device, comprising:

a policy database including rules related to wireless connectivity permissions; and

an intelligent agent for enforcing the policy database rules.

13. The client module of claim 12, wherein the intelligent agent enforces the policy database rules independent of connectivity to a network.

14. A client module deployed on a wireless device, comprising:

a policy database; and

an agent responsive to the policy database, the agent configured to monitor unauthorized use of the wireless device.

15. The client module of claim 14, wherein the agent is adapted to prevent unauthorized data transfer.

16. A client module deployed on a wireless device, comprising:

a policy database including at least one type of data file from the group consisting of;

(i) multiple profile data, (ii) connectivity permissions, (iii) authorized wireless device identification, and (iv) authorized network access node information;

an intelligent agent for enforcing rules of the policy database; and

an activity log containing wireless connectivity history information.

17. A client module deployed on a wireless device, comprising:

a policy database including at least one data file including information from the group consisting of (i) profile data, (ii) connectivity permissions, (iii) authorized wireless device identification, and (iv) authorized network access node information; and

an intelligent agent for enforcing one or more rules included in the policy database.