DISTRIBUTED DATA REVOCATION USING DATA COMMANDS

• US 20110276683A1
• Filed: 05/06/2011
• Published: 11/10/2011
• Est. Priority Date: 05/06/2010
• Status: Active Grant

• Current Assignee: Skyhigh Security LLC
• Original Assignee: Digital Trust Incorporated
• Inventors: Walker, David, Sapp, Kevin, Goldschlag, David
• Granted Patent: US 8,935,384 B2
• Time in Patent Office: Days
• US Class Current: 709/224
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/00 Services specially adapted for wireless communication networks; Facilities therefor
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits

Abstract

A policy proxy intercepts a data stream between a data server and a user or other device, identifies the user device, and identifies a policy in an integrated policy server applicable to the user device based on the identity of the user device. The policy proxy may identify one or more of the policy elements based on the user device, and translate the policy elements into actions involving the data stream between the data server and the user device so as to implement at least one aspect of the identified policy. The actions can comprise permitting normal exchange of data between the data server and the user device, preventing communication between the data server and the user device, or modifying the data stream between the data server and the user device.

Claims

1. A method for operating a network comprising:

intercepting a data stream being exchanged between a data server and the mobile device,

comparing actual policy elements of the mobile device with expected policy elements of the mobile device; and

,

modifying the data stream in accordance with difference between the actual policy elements and the expected policy elements.

2. The method of claim 1 wherein the step of modifying the data stream results in altering data stored on the mobile device.

3. A system for operating a network comprising:

a policy proxy that intercepts a data stream being exchanged between a data server and the mobile device,

the policy proxy being structured to compare actual policy elements of the mobile device with expected policy elements of the mobile device;

the policy proxy modifying the data stream in accordance with difference between the actual policy elements and the expected policy elements.

4. The system of claim 3 wherein the modified data stream results in altering data stored on the mobile device.

5. A computer storage device coupled to a processor, said computer storage device storing computer program instructions that when executed control the processor to perform the following functions:

intercept a data stream being exchanged between a data server and the mobile device,

compare actual policy elements of the mobile device with expected policy elements of the mobile device; and

,

modify the data stream in accordance with difference between the actual policy elements and the expected policy elements.