POLICY PROXY

• US 20120303786A1
• Filed: 08/09/2012
• Published: 11/29/2012
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Brown, Michael K., Adams, Neil P., Little, Herbert A.
• Granted Patent: US 9,531,828 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

Claims

1. A method in a policy server, the method comprising:

receiving from a first electronic device a request for a policy for a second electronic device that is not capable of direct communication with the policy server; and

sending the policy to the first electronic device.

2. The method of claim 1, further comprising:

receiving a confirmation from the first electronic device that all or a portion of the policy has been applied at the second electronic device.

3. The method of claim 1, wherein the first electronic device is a mobile electronic device.

4. The method of claim 1, wherein the second electronic device comprises a smart card reader.

5. The method of claim 1, wherein the second electronic device is a printer.

7. The method of claim 1, further comprising:

receiving a confirmation from the first electronic device that all or a portion of the policy has been applied at the second electronic device

6. A method in a policy server, the method comprising:

pushing to a first electronic device a policy for a second electronic device that is not capable of direct communication with the policy server.

8. The method of claim 6, wherein the first electronic device is a mobile electronic device.

9. The method of claim 6, wherein the second electronic device comprises a smart card reader.

10. The method of claim 6, wherein the second electronic device is a printer.

11. A method in a first electronic device that is able to communicate with a policy server and is able to communicate with a second electronic device, the method comprising:

receiving from the policy server a policy for the second device, wherein the second device is not capable of direct communication with the policy server;

sending the policy to the second electronic device; and

sending a confirmation to the policy server once all or a portion of the policy is applied at the second electronic device.

12. The method of claim 11, wherein the first electronic device is a mobile electronic device.

13. The method of claim 11, wherein the second electronic device comprises a smart card reader.

14. The method of claim 11, wherein the second electronic device is a printer.

15. A policy server comprising:

a processor;

a communication interface coupled to the processor;

a memory coupled to the processor, the memory storing one or more policies and instructions executable by the processor, the instructions being adapted to;

receive from the first electronic device, via the communication interface, a request for one of the policies that is for a second electronic device that is not capable of direct communication with the policy server; and

send the policy to the first electronic device.

16. The policy server of claim 15, wherein the instructions are further adapted to:

receive from the first electronic device, via the communication interface, a confirmation that all or a portion of the policy has been applied at the second electronic device.

17. A policy server comprising:

a processor;

a communication interface coupled to the processor;

a memory coupled to the processor, the memory storing one or more policies and instructions executable by the processor, the instructions being adapted to;

push to a first electronic device, via the communication interface, one of the policies that is for a second electronic device that is not capable of direct communication with the policy server.

18. The policy server of claim 17, wherein the instructions are further adapted to:

receive from the first electronic device, via the communication interface, a confirmation that all or a portion of the policy has been applied at the second electronic device.

19. A first electronic device comprising:

a processor;

a first communication interface coupled to the processor and through which the first electronic device is able to communicate with a policy server;

a second communication interface coupled to the processor and through which the first device is able to communicate with a second electronic device that is not capable of direct communication with the policy server,

a memory coupled to the processor, the memory storing instructions being adapted to;

receive from the policy server, via the first communication interface, a policy for the second device;

send the policy to the second electronic device, via the second communication interface; and

send to the policy server, via the first communication interface, a confirmation that all or a portion of the policy has been applied at the second electronic device.