METHOD AND APPARATUS FOR SELECTING A SECURITY POLICY

• US 20120011559A1
• Filed: 07/06/2010
• Published: 01/12/2012
• Est. Priority Date: 07/06/2010
• Status: Active Grant

• Current Assignee: RPX Corporation
• Original Assignee: Nokia Corporation
• Inventors: Miettinen, Markus Juhani, Asokan, Nadarajah
• Granted Patent: US 8,621,656 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2149 Restricted operating environment

Abstract

An approach is provided for selecting a security policy. A security policy manager determines, at a device, context information associated with a place. The security policy manager then determines a safety score associated with the place based, at least in part, on the context information and selects a security policy for the device based, at least in part, on the safety score.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

context information determined at a device;

at least one determination of a safety score based, at least in part, on the context information; and

at least one selection of a security policy based, at least in part, on the safety score.

2. A method of claim 1, wherein the context information is associated with a place, and wherein the safety score is determined with respect to the place.

3. A method of claim 1, wherein the security policy relates to a locking mechanism of the device, and wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one selection of the locking mechanism for the device based, at least in part, on the safety score, the security policy, or a combination thereof

4. A method of claim 3, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

one or more configuration parameters of the locking mechanism based, at least in part, on the safety score, the security policy, or a combination thereof

5. A method of claim 1, wherein the context information relates, at least in part, to content acquired at the place, one or more other devices with proximity of the place, or a combination thereof, and wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one selection from among the one or more other devices based, at least in part, on the context information, the safety score, the security policy, or a combination thereof; and

at least one determination to transmit the content to the selected one or more other devices based, at least in part, on the context information, the safety score, the security policy, or a combination thereof.

6. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of access to content, one or more applications, one or more features, one or more functions, or a combination thereof of the device based, at least in part, on the safety score, the security policy, or a combination thereof

7. A method of claim 6, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination to generate an alert with respect to the access based, at least in part, on the safety score, the security policy, or a combination thereof

8. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination to create a group of one or more other devices based, at least in part, on the safety score, the security policy, or a combination thereof.

9. A method of claim 1, wherein the context information includes one or more parameters related to a familiarity, a trustworthiness, or a combination thereof of at least one of a place, the device, a user of the device, one or more other devices within proximity of the place, and respective other users of the one or more other devices.

10. A method of claim 9, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of the safety score to include components of the familiarity, the trustworthiness, or a combination thereof.

11. A method of claim 9, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one occurrence frequency of the one or more parameters,

wherein the familiarity of the one or more parameters is based, at least in part, on the at least one occurrence frequency.

12. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one separation of the context information into one or more context classes; and

at least one determination of the safety score for the one or more context classes.

13. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine context information at a device;

determine a safety score based, at least in part, on the context information; and

select a security policy based, at least in part, on the safety score.

14. An apparatus of claim 13, wherein the context information is associated with a place, and wherein the safety score is determined with respect to the place.

15. An apparatus of claim 13, wherein the security policy relates to a locking mechanism of the device, and wherein the apparatus is further caused to:

select the locking mechanism for the device based, at least in part, on the safety score, the security policy, or a combination thereof.

16. An apparatus of claim 13, wherein the context information relates, at least in part, to content acquired at the place, one or more other devices with proximity of the place, or a combination thereof, and wherein the apparatus is further caused to:

select from among the one or more other devices based, at least in part, on the context information, the safety score, the security policy, or a combination thereof; and

determine to transmit the content to the selected one or more other devices based, at least in part, on the context information, the safety score, the security policy, or a combination thereof

17. An apparatus of claim 13, wherein the apparatus is further caused to:

determine access to content, one or more applications, one or more features, one or more functions, or a combination thereof of the device based, at least in part, on the safety score, the security policy, or a combination thereof

18. An apparatus of claim 17, wherein the apparatus is further caused to:

determine to generate an alert with respect to the access based, at least in part, on the safety score, the security policy, or a combination thereof

19. An apparatus of claim 13, wherein the apparatus is further caused to:

determine to create a group of one or more other devices within proximity the place based, at least in part, on the context information, the safety score, the security policy, or a combination thereof.

20. An apparatus of claim 13, wherein the context information includes one or more parameters related to a familiarity, a trustworthiness, or a combination thereof of at least one of the place, the device, a user of the device, one or more other devices within proximity of the place, and respective other users of the one or more other devices.

21-50. -50. (canceled)