Method and device for policy-based control of radio

• US 20080163334A1
• Filed: 04/10/2007
• Published: 07/03/2008
• Est. Priority Date: 12/29/2006
• Status: Active Grant

• Current Assignee: Shared Spectrum Company
• Original Assignee: Shared Spectrum Company
• Inventors: McHenry, Mark A., Perich, Filip, Tenhula, Peter A.
• Granted Patent: US 8,997,170 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04W 28/04 Error control
• CPC Class Codes: H04W 48/02 Access restriction performed under specific conditions
• CPC Class Codes: H04W 74/085 collision avoidance
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A device is disclosed that includes software components for executing actions and for controlling the device in order to conform to specified policies. The device includes a controller to deny or permit execution of actions. The controller monitors and interrupts execution of device'"'"'s actions in order to determine whether an action violates a policy, policy rules, or if the action is prohibited by a policy. The controller also manages policies defined for the device. Each policy is translated into a language understandable by the controller and stored on the device. Each policy can be updated or changed dynamically. Additionally, each policy can securely be updated or changed remotely.

Claims

1. A method for policy-based control of a device, the method comprising:

generating an action on the device, wherein the device includes a policy controller;

evaluating policies related to the action, wherein the policies are understandable by the controller; and

controlling execution of the action on the device with the controller according to the policies.

2. The method of claim 1, further comprising determining an allowable action based on the policy, wherein the controller informs the device of the allowable action.

3. The method of claim 2, further comprising determining a pre-condition to be met to perform the allowable action.

4. The method of claim 1, wherein the action includes transmitting a signal from the device.

5. The method of claim 4, wherein the controlling step includes approving transmission of the signal from the device.

6. The method of claim 4, wherein the controlling step includes denying transmission of the signal from the device.

7. The method of claim 1, further comprising collecting device state information.

8. The method of claim 7, wherein the controlling step includes controlling execution of the action by the controller according to the device state information.

9. The method of claim 1, further comprising interrupting execution of the action on the device.

10. The method of claim 1, further comprising evaluating a state on the device against the policies by the controller.

11. The method of claim 1, further comprising updating the policies on the device.

12. The method of claim 11, wherein the updating step includes updating the policies in real time.

13. The method of claim 1, further comprising downloading the policies to the device.

14. The method of claim 1, wherein the generating step is initiated by an optimizer of the components.

15. The method of claim 1, wherein the controlling step includes using a policy enforcer of the controller to control execution.

16. The method of claim 1, wherein the controlling step includes controlling a radio to transmit or receive a signal.

17. A method for controlling a device, the method comprising:

evaluating a state on the device using a controller against policies, wherein the policies are formatted in a language readable by the controller;

deciding on an action to be executed based on the evaluation;

controlling execution of the action on the device using the controller, wherein the controller determines whether to execute the action based on policies.

18. The method of claim 17, wherein the controlling step comprises denying execution of the action on the device.

19. The method of claim 17, further comprising collecting information on the device and providing the information to the controller.

20. The method of claim 17, further comprising preparing a command to execute the action.

21. The method of claim 17, further comprising downloading policies to the device.

22. The method of claim 17, further comprising determining a condition for executing the action using the controller and policies.

23. The method of claim 17, wherein the controlling step includes controlling execution on a radio.

26. The device of claim 23, wherein the policy is translated into a format readable by the controller.

27. The device of claim 23, further comprising a detector to provide information to the controller, wherein the controller uses the information to deny or approve execution of the action.

24. A device comprising:

an optimizer to identify an action to execute; and

a controller to deny or approve execution of the action according to policies.

25. The device of claim 24, wherein the controller uses a state of the device to deny or approve execution of the action.

28. A device having software components, the device comprising:

a policy enforcer to control a transmission from the device and to configure a system strategy reasoner; and

a policy manager to store and manage policies and to load policies to a policy conformance reasoner, wherein the policy conformance reasoner reasons over policies and information regarding a state of the radio and provides a result to the policy enforcer.

29. The device of claim 28, wherein the device comprises a radio.