METHOD AND APPARATUS FOR SEPARATION OF CONNECTION DATA BY PERIMETER TYPE

• US 20130219465A1
• Filed: 12/17/2012
• Published: 08/22/2013
• Est. Priority Date: 02/16/2012
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: TSE, Chi Chiu, MAZZUCA, Elliott Michael Guy, HAMMEL, Konrad
• Granted Patent: US 9,306,948 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/086 using security domains
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

A method and a mobile device having a plurality of modes of operation, the method associating each connection interface on the mobile device with one of a plurality of modes; and restricting access to a profile for each connection interface on the mobile device to only a subset of applications based on the mode associated with the profile.

Claims

1. A method on a mobile device having one or more applications, a plurality of modes of operation and one or more network connections, each network connection associated with one of one or more network connection profiles and each application associated with one of the plurality of modes of operation, the method comprising:

associating each of the one or more network connection profiles with at least one of the plurality of modes of operation; and

restricting access to each of the one or more network connections to only those applications associated with the same mode of operation as the network connection profile associated with the network connection.

2. The method of claim 1, wherein the modes of operation comprise a personal mode and an enterprise mode.

3. The method of claim 1, wherein the associating comprises storing each network connection profile in a file system for an associated mode of operation.

4. The method of claim 1, further comprising preventing backup or restoring of each network connection profile in at least one of the plurality of modes of operation.

5. The method of claim 1, wherein the network connection is a virtual private network connection.

6. The method of claim 1, wherein the network connection is a Wi-Fi network connection.

7. The method of claim 1, wherein the associating utilizes an information technology policy for the device to match network connection profiles with at least one of the plurality of modes of operation.

8. The method of claim 1, wherein the associating utilizes a source for configuration information for each network connection to match each network connection profile with at least one of the plurality of modes of operation.

9. A user equipment comprising:

a processor; and

a communications subsystem,

wherein the user equipment is configured to;

associate each network connection with one of one or more network connection profiles and each application with one or more of a plurality of modes of operation;

associate used to establish a network connection on the mobile device with at least one of a plurality of modes of operation; and

restrict access to each of the one or more network connections to only those applications associated with the same mode of operation as the network connection profile associated with the network connection.

10. The user equipment of claim 9, wherein the modes of operation comprise a personal mode and an enterprise mode.

11. The user equipment of claim 9, wherein the associating each of the one or more network connection profiles comprises storing each network connection profile in a file system for an associated mode of operation.

12. The user equipment of claim 9, further comprising preventing backup or restoring of each network connection profile in at least one of the plurality of modes of operation.

13. The user equipment of claim 9, wherein the network connection is a virtual private network connection.

14. The user equipment of claim 9, wherein the network connection is a Wi-Fi network connection.

15. The user equipment of claim 9, wherein the user equipment is configured to associate by utilizing an information technology policy for the device to match network connection profiles with at least one of the plurality of modes of operation.

16. The user equipment of claim 9, wherein the user equipment is configured to associate each of the one or more network connection profiles by utilizing a source for configuration information for each network connection to match each network connection profile with at least one of the plurality of modes of operation