Enforcing Centralized Communication Policies

• US 20110119730A1
• Filed: 05/05/2010
• Published: 05/19/2011
• Est. Priority Date: 05/07/2009
• Status: Abandoned Application

• Current Assignee: Onset Technology Incorporated
• Original Assignee: Onset Technology Incorporated
• Inventors: Eldar, Rotem, Vered, Hagal, Pemper, Yuval
• Application Number:
  US12/774,619
• Publication Number:
  US 20110119730A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 51/58 Message adaptation for wireless communication
• CPC Class Codes: H04L 63/0218 Distributed architectures, e.g. distributed firewalls
• CPC Class Codes: H04L 63/0263 Rule management
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A system provides centralized policies to be applied in a distributed manner to all communication channels used by a set of mobile communication devices, including communication channels which do not pass through a centralized communication server, such PIN-to-PIN communication channels. Such policies may include address-based and content-based policies. The system also allows all such communications to be archived.

Claims

1. A method performed by a first computing device, the method comprising:

(A) receiving a rule from a second computing device that differs from the first computing device;

(B) storing the rule;

(C) determining whether a message at the first computing device satisfies the rule; and

(D) taking an action specified by the rule if the message is determined to satisfy the rule.

2. The method of claim 1, wherein (A) comprises receiving the rule over a network from the second computing device.

3. The method of claim 1, wherein the rule comprises the action and a message filter;

wherein (C) comprises determining whether the message passes the message filter; and

wherein (D) comprises taking the action if the message is determined to pass the message filter.

4. The method of claim 3, wherein (C) comprises determining whether content of the message passes the message filter.

5. The method of claim 4, wherein (C) comprises determining whether an attachment of the message passes the message filter.

6. The method of claim 3, wherein (C) comprises determining whether an address of a sender of the message passes the message filter.

7. The method of claim 3, wherein (C) comprises determining whether an address of a recipient of the message passes the message filter.

8. The method of claim 7, wherein (C) further comprises determining whether an address of a sender of the message passes the message filter.

9. The method of claim 3, wherein (C) comprises determining whether at least one of a time of transmission of the message and a time of receipt of the message passes the message filter.

10. The method of claim 3, wherein (C) comprises determining whether a location of the first device passes the message filter.

11. The method of claim 3, wherein (C) comprises determining whether any combination of the following passes the message filter:

content of the message, an address of a sender of the message, an address of a recipient of the message, a time of transmission of the message, a time of receipt of the message, and a location of the first device.

12. The method of claim 3, wherein determining whether the message passes the message filter comprises:

determining whether the message is of a type to which the rule applies; and

determining whether the message satisfies the rule in response to determining that the message is of a type to which the rule applies.

13. The method of claim 1, wherein (A) comprises receiving a policy from the second computing device, the policy comprising a plurality of rules including the rule;

and

wherein the method further comprises performing (B), (C), and (D) for each of the plurality of rules.

14. The method of claim 1, wherein the message comprises a personal identifier of at least one of a human sender of the message and a human recipient of the message.

15. The method of claim 14, wherein the personal identifier comprises a telephone number.

16. The method of claim 1, wherein the message comprises one of an email message, an SMS message, an MMS message, an instant message, and a PIN-to-PIN message.

17. The method of claim 1, wherein (C) is performed in response to detection of an attempt by the first computing device to transmit the message.

18. The method of claim 17, wherein (D) comprises blocking the message from being transmitted by the first computing device if the message is determined to pass the message filter.

19. The method of claim 17, wherein (D) comprises allowing the message to be transmitted by the first computing device if the message is determined to pass the message filter.

20. The method of claim 1, wherein (C) is performed in response to detection of receipt by the first computing device of the message.

21. The method of claim 20, wherein (D) comprises blocking the message from being displayed to a user of the first computing device if the message is determined to pass the message filter.

22. The method of claim 20, wherein (D) comprises allowing the message to be displayed to a user of the first computing device if the message is determined to pass the message filter.

23. The method of claim 1, wherein (D) comprises:

(D) (1) notifying a user of a third computing device that the message has been determined to satisfy the rule.

24. The method of claim 23, wherein the third computing device comprises the first computing device.

25. The method of claim 23, wherein the third computing device comprises the second computing device.

26. The method of claim 23, wherein the third computing device differs from the first computing device and the second computing device.

27. The method of claim 23, wherein (D) further comprises:

(D) (2) receiving a modified version of the message from the user.

28. The method of claim 23, wherein (D) further comprises:

(D) (2) receiving an instruction from the user in response to the notification.

29. The method of claim 28, wherein (D) further comprises:

(D) (3) transmitting the message in response to receiving the instruction.

30. The method of claim 28, wherein (D) further comprises:

(D) (3) blocking transmission of the message in response to receiving the instruction.

31. The method of claim 28, wherein (D) further comprises:

(D) (3) displaying the message in response to receiving the instruction.

32. The method of claim 28, wherein (D) further comprises:

(D) (3) blocking display of the message in response to receiving the instruction.

33. The method of claim 1, wherein the second computing device is neither a sender nor a recipient of the message.

34. The method of claim 1, wherein the first computing device performs (C) and (D) without communicating with the second computing device.

35. The method of claim 1, wherein the first computing device performs (C) and (D) while there is no network connection between the first computing device and the second computing device.

36. A computer-implemented method comprising:

(A) at a communication policy server, transmitting a first rule to first and second client communication devices;

(B) at the first client communication device;

(1) storing the first rule;

(2) determining whether a first message at the first client communication device satisfies the first rule;

(3) taking an action specified by the first rule if the first message is determined to satisfy the first rule;

(C) at the second client communication device;

(1) storing the first rule;

(2) determining whether a second message at the second client communication device satisfies the first rule; and

(3) taking the action specified by the first rule if the second message is determined to satisfy the first rule.

37. The method of claim 36, further comprising:

(D) at the communication policy server, modifying the first rule to produce a modified first rule; and

(E) at the communication policy server, transmitting the modified first rule to the plurality of client communication devices.

38. The method of claim 36, wherein (B) (1) comprises storing the first rule on the first one of the client communication devices.

39. The method of claim 36, further comprising:

(D) at the communication policy server, transmitting a second rule to the first client communication device and not to the second client communication device.

40. The method of claim 36, wherein (B) (2) comprises using an instance of a communication policy client to determine whether the first message satisfies the first rule;

wherein (B) (3) comprises transmitting the first message to a third client communication device which differs from the first and second client communication devices, wherein no instance of the communication policy client is installed on the third client communication device.

41. The method of claim 36, wherein (B) (2) comprises using an instance of a communication policy client to determine whether the first message satisfies the first rule;

and

wherein the method further comprises;

(D) at a third client communication device which differs from the first and second client communication devices, transmitting the first message to the first client communication device, wherein no instance of the communication policy client is installed on the third client communication device.

42. A method performed by a first computing device, the method comprising:

(A) detecting a first message at the first computing device, the first message having a second computing device as its sender or recipient;

(B) creating an archiving message based on the first message;

(C) storing the archiving message securely on a computer-readable medium in the first computing device; and

(D) transmitting the archiving message to a third computing device for storage in an archive.

43. The method of claim 42, wherein (C) comprises storing the archiving message in a form which hides contents of the archiving message from users of the first computing device.

44. The method of claim 43, wherein (C) comprises storing the archiving message in an encrypted form.

45. The method of claim 43, wherein (C) comprises storing the archiving message in a file having a hidden file attribute in a file system.

46. The method of claim 42, wherein (C) comprises storing the archiving message in a form that is protected against deletion and modification by users of the first computing device.

47. The method of claim 46, wherein (C) comprises storing the archiving message in a file having limited access privileges.

48. The method of claim 42, wherein (B), (C), and (D) are performed in response to detection of the first message at the first computing device.

49. The method of claim 42, further comprising:

(E) receiving a rule over a network from a second computing device;

(F) determining whether the first message at the first computing device satisfies the rule; and

wherein (B), (C), and (D) are performed in response to determining that the first message satisfies the rule.

50. The method of claim 42, wherein (D) comprises:

(D) (1) attempting to transmit the archiving message to the third computing device;

(D) (2) determining whether the transmission in (D) (1) succeeded;

(D) (3) re-attempting the transmission of the archiving message to the third computing device if the transmission in (D) (1) failed; and

(D) (4)) repeating (D) (2) and (D) (3) until transmission of the archiving message to the third computing device succeeds.

51. The method of claim 42:

wherein (A) comprises receiving or transmitting the first message over a first communication channel using a first communication protocol; and

wherein (D) comprises transmitting the archiving message over a second communication channel using a second communication protocol that differs from the first communication protocol.

52. The method of claim 51, wherein (A) comprises receiving the first message according to the first protocol, and wherein (D) comprises transmitting the archiving message according to the second protocol.

53. The method of claim 51, wherein the first protocol comprises a non-email protocol, and wherein the second protocol comprises an email protocol.

54. The method of claim 42, wherein the archiving message comprises the first message.

55. The method of claim 42, wherein the archiving message comprises an identifier of the first computing device.

56. The method of claim 42, wherein the archiving message comprises an identifier of a user of the first computing device.

57. The method of claim 56, wherein (B) comprises:

(B) (1) identifying a telephone number of the first computing device; and

(B) (2) identifying the identifier of the user based on the telephone number.

58. The method of claim 42, wherein the archiving message comprises an identifier of a recipient of the first message.