MOBILE DATA SECURITY SYSTEM AND METHODS

• US 20110167470A1
• Filed: 07/06/2010
• Published: 07/07/2011
• Est. Priority Date: 02/28/2005
• Status: Abandoned Application

• Current Assignee: Digital Trust Incorporated
• Original Assignee: Digital Trust Incorporated
• Inventors: Walker, David, Sapp, Kevin, Goldschlag, David, Shahbazi, Majid
• Application Number:
  US12/830,861
• Publication Number:
  US 20110167470A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Policy is provided from an integrated policy server to a mobile device, comprising identifying a policy in an integrated policy server applicable to the mobile device and supplying policy elements to policy transports for transmission to the mobile device. Policy can also be provided from an integrated policy server to a mobile device, including identifying a policy in the integrated policy server applicable to the mobile device, determining whether the mobile device is in compliance with the policy, and supplying policy elements to policy transports for transmission to the mobile device when the mobile device is not in compliance with the policy. Access to a data server by a mobile device can be controlled, including identifying a policy in an integrated policy server applicable to the mobile device, and determining whether the mobile device is in compliance with the policy.

Claims

1. A method for providing policy from an integrated policy server to a mobile device, the mobile device having policy compliance capabilities, the method comprising:

receiving a data stream between a data server and the mobile device, the data stream including one or more policy transports;

identifying the mobile device;

identifying a policy in an integrated policy server applicable to the mobile device based on the identity of the mobile device, the policy including one or more policy elements including synchronization, authorization or admission control;

identifying one or more of the policy elements based on the mobile device; and

supplying the identified policy elements to one or more of the policy transports for transmission to the mobile device.

2. The method of claim 1, further comprising removing one or more policy elements from the data stream.

3. The method of claim 1, further comprising translating one or more of the policy elements into a form transmittable by one or more of the policy transports.

4. The method of claim 1, further comprising:

identifying a policy element to serve as a policy indicator; and

injecting the policy indicator into the data stream.

5. The method of claim 4, wherein the policy indicator is a digital certificate.

6. The method of claim 1, further comprising:

installing the identified policy elements on the mobile device; and

reporting the installation of the identified policy elements on the mobile device to the integrated policy server.

7. A system for providing policy from an integrated policy server to a mobile device, the mobile device having policy compliance capabilities, the system comprising:

a data server;

an integrated policy server; and

a policy proxy configured to;

receive a data stream between the data server and the mobile device, the data stream including one or more policy transports;

identify the mobile device;

identify a policy in the integrated policy server applicable to the mobile device based on the identity of the mobile device, the policy including one or more policy elements;

identify one or more of the policy elements based on the mobile device; and

supply the identified policy elements to one or more of the policy transports for transmission to the mobile device.

8. The system of claim 7, wherein the policy proxy is further configured to remove one or more policy elements from the data stream.

9. The system of claim 7, wherein the policy proxy is further configured to translate one or more of the policy elements into a form transmittable by one or more of the policy transports.

10. The system of claim 7, wherein the policy proxy is further configured to:

identify a policy element to serve as a policy indicator; and

inject the policy indicator into the data stream.

11. The system of claim 10, wherein the policy indicator is a digital certificate.

12. The system of claim 7, wherein the policy proxy is further configured to:

install the identified policy elements on the mobile device; and

report the installation of the identified policy elements on the mobile device to the integrated policy server.

13. A device for providing policy from an integrated policy server to a mobile device, the mobile device having policy compliance capabilities, the device comprising a policy proxy configured to:

receive a data stream between a data server and the mobile device, the data stream including one or more policy transports;

identify the mobile device;

identify a policy in an integrated policy server applicable to the mobile device based on the identity of the mobile device, the policy including one or more policy elements;

identify one or more of the policy elements based on the mobile device; and

supply the identified policy elements to one or more of the policy transports for transmission to the mobile device.

14. The device of claim 13, wherein the policy proxy is further configured to remove one or more policy elements from the data stream.

15. The device of claim 13, wherein the policy proxy is further configured to translate one or more of the policy elements into a form transmittable by one or more of the policy transports.

16. The device of claim 13, wherein the policy proxy is further configured to:

identify a policy element to serve as a policy indicator; and

inject the policy indicator into the data stream.

17. The device of claim 16, wherein the policy indicator is a digital certificate.

18. The device of claim 13, wherein the policy proxy is further configured to:

install the identified policy elements on the mobile device; and

report the installation of the identified policy elements on the mobile device to the integrated policy server.