Method for providing wireless application privilege management

• US 20060236367A1
• Filed: 07/26/2005
• Published: 10/19/2006
• Est. Priority Date: 04/18/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Shenfield, Michael, Vitanov, Kamen B., Goring, Bryan R., Bibr, Viera, Fritsch, Brindusa, Wallis, Kenneth, Rogers, Jeffrey C.
• Granted Patent: US 8,365,240 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for providing an administration policy to a user device comprising a plurality of applications, the method comprising centrally generating the administration policy to be implemented in the user device, the administration policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for the user device; and providing the generated policy to the user device.

Claims

1. A method for providing an administration policy to a user device comprising a plurality of applications, said method comprising:

centrally generating said administration policy to be implemented in said user device, said administration policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for said user device; and

providing said administration policy to said user device.

2. The method as claimed in claim 1, wherein said user device is a wireless device, further wherein said administration policy is provided over-the-air to said wireless device.

3. The method as claimed in claim 2, wherein said generating of said policy to be implemented in said user device is performed by an operator managing a plurality of user devices.

4. The method as claimed in claim 3, wherein said policy comprises a plurality of application administration policies, each being assigned to at least one of the plurality of applications, further wherein each of the plurality of application administration policies is uniquely identified using an identifier.

5. The method as claimed in claim 4, wherein said identifier is generated automatically.

6. The method as claimed in claim 5, wherein said identifier is generated by said operator.

7. The method as claimed in claim 1, wherein said providing of said generated policy to said user device comprises transmitting said generated policy to said user and installing the transmitted generated policy in said user device.

8. The method as claimed in claim 7, wherein said installing of said transmitted generated policy in said user device comprises installing said client administration policy and installing said application administration policy.

9. The method as claimed in claim 8, wherein said installing of said client administration policy comprises storing said client administration policy in a client administration policy database.

10. The method as claimed in claim 9, wherein said installing of said application administration policy comprises storing said application administration policy in an application administration policy database.

11. The method as claimed in claim 10, wherein application administration policy database is distinct from said client administration policy database.

12. A computer readable memory comprising a plurality of instructions which when executed perform the method as claimed in any one of claims 1-13.

13. A method for implementing an administration policy in a wireless user device comprising a plurality of applications, said method comprising:

receiving, from a central location, said administration policy to be implemented in said wireless user device, said policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for said wireless user device; and

installing said received policy in said wireless user device.

14. The method as claimed in claim 13, wherein said policy is received over a wireless link.

15. The method as claimed in claim 14, wherein said installing of said received policy in said wireless user device comprises storing said client administration policy in a client administration policy database and storing said application administration policy in a application administration policy database.

16. A computer readable memory comprising a plurality of instructions which when executed perform the method as claimed in any one of claims 13-15.

17. An application gateway adapted to enable remote administration of one or more managed server units of a data network using a user device of a wireless network, the application gateway comprising:

means for managing a provisioning of an administration policy to a user device comprising a plurality of applications, said provisioning comprising;

generating said administration policy to be implemented in said user device, said administration policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for said user device; and

providing said administration policy to said user device.