ACCESS CONTROL TO FILES BASED ON SOURCE INFORMATION

• US 20140259092A1
• Filed: 02/07/2014
• Published: 09/11/2014
• Est. Priority Date: 02/28/2003
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: BOUCHER, Peter, WRIGHT, Michael, CRANNY, Tim, NAULT, Gabe, SMITH, Merrill
• Application Number:
  US14/175,640
• Publication Number:
  US 20140259092A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

The present invention is a security tool for protection of data on a mobile computing device. The security tool provides a plurality of security policies to be enforced based on source information for the data and a location associated with a network environment in which a mobile device is operating. The security tool may be either located at the mobile computing device or at the server. The security tool includes a file access module for determining whether files are visible or accessible. The file access module comprises a tag generator, an association module, and a policy enforcement module. The tag generator creates source information for the file being accessed and the policy enforcement module determines what actions, if any, can be performed on the file and under what conditions such as location and network environment, type of file and other factors.

Claims

1-21. -21. (canceled)

22. A method for providing security to a mobile device, comprising:

automatically detecting a location of a mobile device; and

implementing on the mobile device a first security policy when the mobile device is located in a first location, and implementing on the mobile device a second security policy when the mobile device is located in a second location.

23. The method of claim 22, comprising pre-configuring security policies for a plurality of locations.

24. The method of claim 23, wherein the plurality of locations comprises a home, a work, an alternate, or a custom location.

25. The method of claim 23, wherein the plurality of security policies are stored on a memory of the mobile device.

26. The method of claim 23, wherein the plurality of security policies are accessed over a network connection.

27. The method of claim 22, further comprising implementing on the mobile device a third security policy when the mobile device is located in a third location.

28. The method of claim 22, wherein the location of the mobile device is detected based on one or more parameters received from a network connection.

29. The method of claim 28, wherein one of the parameters is an Internet Protocol address.

30. The method of claim 22, wherein the mobile device continues to detect the location of the mobile device and applies an appropriate policy automatically when a location of the mobile device changes.

31. The method of claim 28, wherein the network connection is a wireless network connection.

32. The method of claim 22, further comprising:

determining whether one or more security features have an activity status of inactive or active; and

determining the current security policy based upon the activity status of the one or more security features as well as the detected location.

33. A mobile device comprising:

a memory storing a plurality of locations, each location associated with a security policy;

a processor configured to;

automatically detect a location of a mobile device; and

implement on the mobile device a first security policy when the mobile device is located in a first location, and implement on the mobile device a second security policy when the mobile device is located in a second location.

34. The mobile device of claim 33, wherein the mobile device is configured to connect to a network wirelessly.

35. The mobile device of claim 33, wherein the plurality of locations comprises a home, a work, an alternate, or a custom location.

36. The mobile device of claim 33, wherein the processor is configured to implement on the mobile device a third security policy when the mobile device is located in a third location.

37. The mobile device of claim 33, wherein the location of the mobile device is detected based on one or more parameters received from a network connection.

38. The mobile device of claim 37, wherein one of the parameters is an Internet Protocol address.

39. The mobile device of claim 33, wherein the processor is configured to continuously detect the location of the mobile device and apply an appropriate policy automatically when a location of the mobile device changes.

40. The mobile device of claim 34, wherein the processor is further configured to:

determine whether one or more security features have an activity status of inactive or active; and

determine the current security policy based upon the activity status of the one or more security features as well as the detected location.