ADMINISTRATION OF PROTECTION OF DATA ACCESSIBLE BY A MOBILE DEVICE

• US 20080109679A1
• Filed: 10/29/2007
• Published: 05/08/2008
• Est. Priority Date: 02/28/2003
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Wright, Michael, Mims, Robert, Nault, Gabe, Smith, Merrill, Boucher, Peter, Wood, Jonathan, Jacobson, Sterling
• Application Number:
  US11/926,371
• Publication Number:
  US 20080109679A1
• Time in Patent Office: Days
• US Class Current: 714/37
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/086 using security domains

Abstract

The administration of protection of data on a client mobile computing device by a server computer system such as within an enterprise network or on a separate mobile computing device is described. Security tools are described that provide different security policies to be enforced based on a location associated with a network environment in which a mobile device is operating. Methods for detecting the location of the mobile device are described. Additionally, the security tools may also provide for enforcing different policies based on security features. Examples of security features include the type of connection, wired or wireless, over which data is being transferred, the operation of anti-virus software, or the type of network adapter card. The different security policies provide enforcement mechanisms that may be tailored based upon the detected location and/or active security features associated with the mobile device. Examples of enforcement mechanisms are adaptive port blocking, file hiding and file encryption.

Claims

1. A system for remotely diagnosing one or more mobile devices comprising:

a monitoring module for monitoring diagnostic data received over a network from one or more remotely located mobile client devices;

a diagnosis module for analyzing the diagnostic data; and

a distribution module for transmitting support information to the one or more mobile devices.

2. A method for remotely diagnosing one or more mobile devices comprising:

monitoring diagnostic data received over a network from one or more mobile client devices;

analyzing the diagnostic data; and

transmitting support information to the one or more mobile devices.

3. A method for remotely diagnosing one or more mobile computing devices comprising:

one or more mobile computing devices transmitting diagnostic data over a network to the server computer system;

the mobile device receiving support information including instructions from the server computer system; and

the mobile device executing the instructions.