SYSTEM AND METHOD FOR IMPLEMENTING SECURITY FEATURES AND POLICIES BETWEEN PAIRED COMPUTING DEVICES

• US 20080148350A1
• Filed: 12/14/2006
• Published: 06/19/2008
• Est. Priority Date: 12/14/2006
• Status: Abandoned Application

• Current Assignee: Qualcomm, Inc.
• Original Assignee: Qualcomm, Inc.
• Inventors: Cousineau, Bernard Paul, Hawkins, Jeffrey
• Application Number:
  US11/610,949
• Publication Number:
  US 20080148350A1
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/082 using revocation of authorisation
• CPC Class Codes: H04W 12/126 Anti-theft arrangements, e.g. protection against subscriber identity module [SIM] cloning
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 8/20 Transfer of user or subscriber data
• CPC Class Codes: H04W 84/18 Self-organising networks, e.g. ad-hoc networks or sensor networks

Abstract

A roaming device to secure data and/or resources on an associated computing device. The roaming device may communicate with a remote policy node or station to receive one or more policy directives. The roaming device may use a wireless wide area network (WAN) to communicate with the policy node, such as provided by cellular networks. The roaming device may cause the paired computing device to implement or configure a policy by communicating an instruction to the paired computing device. This instruction may be based on the policy directives that the roaming device receives from the policy node. The communication exchanged between the roaming device and the paired computing device may be over a local wireless communication port, such as provided by short-range wireless communication ports. The roaming device may also act as a key for the associated computing device, using communications over short range wireless communication ports to bypass user security features if the roaming device is in close proximity to the associated computing device.

Claims

1. A method, performed on a roaming device, for directing policy implementation on a paired computing device, the method comprising:

on the roaming device, communicating with a policy node using a wireless network to receive one or more policy directives; and

transmitting an instruction based on the one or more policy directives to the paired computing device, in order to cause the paired computing device to implement or configure a policy, wherein transmitting the instruction is performed using a local communication port.

2. The method of claim 1, further comprising implementing, on the roaming device, a policy based on the one or more policy directives, wherein implementing the policy on the roaming device is performed in tandem with the paired computing device.

3. The method of claim 1, wherein the one or more policy directives specify implementation of one or more security features on one or both of the roaming device and the paired computing device.

4. The method of claim 1, wherein the one or more policy instructions specify a security policy for use on both the roaming device and the associated computing device.

5. The method of claim 1, wherein the local communication port corresponds to a short-range wireless communication port.

6. The method of claim 5, wherein the short-range wireless communication port is either a Bluetooth or wireless Universal Serial Bus port.

7. The method of claim 1, wherein the local communication port corresponds to a physical connection between a connector on the roaming device and a connector on the associated computing device.

8. The method of claim 1, wherein communicating with a policy node using a wireless network is performed during a synchronization process between the roaming device and the policy node.

9. The method of claim 1, wherein communicating with a policy node using a wireless network includes communicating with the policy node using a wide-area wireless network.

10. The method of claim 9, wherein the wide-area wireless network corresponds to a cellular network.

11. The method of claim 1, wherein transmitting an instruction based on the one or more policy directives includes performing a synchronization process with the paired computing device.

12. The method of claim 1, wherein transmitting an instruction based on the one or more policy directives includes performing a synchronization process in which at least one or more of files or data corresponding to a state of use of the roaming device is exchanged with the paired computing device.

13. The method of claim 1, further comprising enabling a user on the paired computing device to decline or alter the policy specified by the instruction.

14-34. -34. (canceled)

35. A method for securing data, the method comprising:

receiving, on a first computing device, a wireless communication from a policy node that includes a first policy directive;

identifying a second computing device that is paired with the first computing device and in position to receive communications from the first computing device over a local communication port; and

communicating a second policy directive to the second computing device using the local communication port, wherein the second policy directive is based at least in part on the first policy directive and instructs the second computing device to implement a particular policy.

36. The method of claim 35, wherein the local communication port corresponds to a short-range wireless communication port, and wherein receiving the wireless communication includes receiving the communication over a cellular network.

37. The method of claim 35, further comprising implementing a policy on the first computing device based on the first policy directive.

38. The method of claim 37, wherein implementing a policy on the first computing device includes implementing the same particular policy on the first computing device and on the second computing device.

39. The method of claim 35, wherein receiving the wireless communication that includes the first policy directive includes performing a synchronization process with a terminal of the policy node.

40. The method of claim 35, wherein communicating a second policy directive to the second computing device includes performing a synchronization process with the second computing device.

41. The method of claim 35, wherein receiving the wireless communication that includes the first policy directive includes performing a synchronization process with a terminal of the policy node;

and wherein communicating a second policy directive to the second computing device includes performing a synchronization process with the second computing device.

42. The method of claim 35, wherein on the second computing device, the method further comprises enabling a user to modify or stop implementation of the particular policy after the second policy directive is received.

43. The method of claim 35, wherein receiving the wireless communication that includes the first policy directive includes receiving a directive to destroy or permanently deny access to all records on the first computing device and on the second computing device.

44. The method of claim 43, wherein communicating a second policy includes sending the second computing device an instruction to destroy or permanently deny access to all records on the second computing device.

45. The method of claim 44, further comprising destroying or permanently denying access to all records on the first computing device is performed after sending the second computing device the instruction.

46. The method of claim 44, further comprising destroying or permanently denying access to all records on the first computing device is performed after confirming that the second computing device received the instruction.