System and Method for Managing Wireless Devices in an Enterprise

• US 20110167497A1
• Filed: 03/14/2011
• Published: 07/07/2011
• Est. Priority Date: 04/19/2002
• Status: Abandoned Application

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Jain, Sandeep, Srinivas, Davanum, Fry, Michael, Saborowski, Ralf, Van de Groenendaal, Johan, Zalewski, Andrzej
• Application Number:
  US13/047,380
• Publication Number:
  US 20110167497A1
• Time in Patent Office: Days
• US Class Current: 726/24
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0882 Utilisation of link capacity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Methods and systems are disclosed for managing wireless devices in an enterprise. A first exemplary method manages the physical access points of a wireless network in an enterprise. A second exemplary method manages the assets of wireless devices in an enterprise. A third exemplary method enables virus detection within wireless devices. A fourth exemplary method manages wireless device data backup.

Claims

1-19. -19. (canceled)

20. A method for managing a wireless device in a network, the method comprising:

detecting a device on an enterprise network;

determining, by a computer, that the device is a wireless device;

determining that the device has received data from a second computer;

automatically executing a virus scanning routine constructed for the wireless device when the wireless device synchronizes with a computer on the enterprise network;

detecting a virus for PCs that does not affect the mobile device; and

if the virus is detected, preventing the wireless device from communicating the virus to any other devices on the enterprise network.

21. The method of claim 20, wherein executing a virus scanning routine further comprises automatically executing a virus scanning routine.

22. The method of claim 20, wherein executing a virus scanning routine further comprises automatically executing a virus scanning routine whenever the wireless device synchronizes with the computer or downloads information from the computer.

23. The method of claim 20, wherein the computer that the data is received from may be infected by a computer virus.

24. A method comprising:

detecting a wireless device on an enterprise network;

authenticating the wireless device;

detecting a virus on the wireless device; and

preventing the wireless device from communicating the virus to any other device on the enterprise network.

25. The method of claim 24, the detecting a virus on the wireless device further comprising:

detecting a virus that is dormant on the wireless device.

26. The method of claim 24, the detecting a virus on the wireless device further comprising:

detecting a virus that is operable to infect a companion PC when the wireless device synchronizes with the companion PC.

27. The method of claim 24, further comprising:

automatically executing a virus scanning routine when the wireless device synchronizes with a computer on the enterprise network.

28. The method of claim 24, further comprising:

executing an on-demand virus scan of the wireless device.

29. The method of claim 24, further comprising:

associating the wireless device with an access point of the enterprise network before allowing the wireless device to communicate with the enterprise network.

30. The method of claim 24, the authenticating the wireless device further comprising:

tracking, by the enterprise network, an inventory of one or more approved devices; and

allowing the wireless device to access the enterprise network if an identification associated with the wireless device is included in the inventory of the one or more approved devices.

31. The method of claim 24, further comprising:

defining a data backup policy associated with the wireless device;

analyzing the data backup policy to determine that data residing on the wireless device is to be backed up; and

backing up the data residing on the wireless device.

32. The method of claim 30, further comprising:

maintaining, by the enterprise network, a software inventory of the wireless device;

determining that a particular version of software of the wireless device is out of date; and

updating the particular version of software of the wireless device.

33. A method comprising:

detecting a device on an enterprise network;

determining that the device is a wireless device;

determining that a plurality of virus signatures on the wireless device is not up to date; and

updating the plurality of virus signatures on the wireless device.

34. The method of claim 33, the determining that a plurality of virus signatures on the wireless device is not up to date further comprising:

identifying, by the enterprise network, a particular version of antivirus software residing on the wireless device; and

determining that the particular version of antivirus software is outdated.

35. The method of claim 33, further comprising:

automatically executing a virus scanning routine when the wireless device synchronizes with a computer on the enterprise network.

36. The method of claim 33, further comprising:

executing an on-demand virus scan of the wireless device.

37. The method of claim 33, further comprising:

associating the wireless device with an access point of the enterprise network before allowing the wireless device to communicate with the enterprise network.

38. The method of claim 33, further comprising:

tracking, by the enterprise network, an inventory of one or more approved devices; and

allowing the wireless device to access the enterprise network if an identification associated with the wireless device is included in the inventory of the one or more approved devices.

39. The method of claim 33, further comprising:

defining a data backup policy associated with the wireless device;

analyzing the data backup policy to determine that data residing on the wireless device is to be backed up; and

backing up the data residing on the wireless device.