Location-based Configuration Policy Toggling

• US 20140330945A1
• Filed: 05/02/2013
• Published: 11/06/2014
• Est. Priority Date: 05/02/2013
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: Sky Socket Llc (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Marshall, John, Stuntebeck, Erich
• Granted Patent: US 9,426,162 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06Q 10/06314 Calendaring for a resource
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled on the user devices if the location constraints are satisfied.

Claims

1. A method comprising:

identifying at least one configuration profile associated with at least one user device;

determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on a current location associated with said user device; and

,

enabling said configuration profile on said user device in response to a determination that said user device is authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device.

2. The method of claim 1, wherein said configuration profile associated with said user device is associated with at least one of the following:

business data, business applications, business software features, and business hardware features.

3. The method of claim 1, wherein said configuration profile associated with said user device is associated with at least one of the following:

personal data, personal applications, personal software features, and personal hardware features.

4. The method of claim 1, wherein determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device comprises determining whether said current location associated with said user device complies with at least one compliance rule specifying at least one location where said user device is authorized to enable said configuration profile on said user device.

5. The method of claim 1, further comprising:

disabling said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device.

6. The method of claim 1, further comprising:

determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on a current time associated with said user device; and

,

enabling said configuration profile on said user device in response to a determination that said user device is authorized to enable said configuration profile on said user device based at least in part on said current time associated with said user device.

7. The method of claim 6, wherein determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on the current time associated with said user device comprises determining whether said current time associated with said user device complies with at least one compliance rule specifying at least one time period when said user device is authorized to enable said configuration profile on said user device.

8. The method of claim 6, further comprising:

disabling said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current time associated with said user device.

9. A non-transitory computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

identifying at least one configuration profile enabled on at least one user device;

determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on a current location associated with said user device; and

,

disabling said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device.

10. The non-transitory computer-readable medium of claim 9, wherein said configuration profile associated with said user device is associated with at least one of the following:

business data, business applications, business software features, and business hardware features.

11. The non-transitory computer-readable medium of claim 9, wherein said configuration profile associated with said user device is associated with at least one of the following:

personal data, personal applications, personal software features, and personal hardware features.

12. The non-transitory computer-readable medium of claim 9, further comprising:

enabling at least one configuration profile that said user device is authorized to enable based at least in part on said current location associated with said user device.

13. The non-transitory computer-readable medium of claim 9, further comprising:

determining whether said user device is authorized to enable said configuration profile on said user device based at least in part on a current time associated with said user device; and

,

disabling said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current time associated with said user device.

14. The non-transitory computer-readable medium of claim 13, further comprising:

enabling at least one configuration profile that said user device is authorized to enable based at least in part on said current time associated with said user device.

15. A system comprising:

at least one memory storage; and

at least one processor coupled to said memory storage, wherein said processor is configured to;

identify at least one configuration profile associated with at least one user device;

determine whether said user device is authorized to enable said configuration profile on said user device based at least in part on whether a current location associated with said user device complies with at least one compliance rule specifying at least one location where said user device is authorized to enable said configuration profile on said user device; and

,

enable said configuration profile on said user device in response to a determination that said user device is authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device.

16. The system of claim 15, wherein said configuration profile associated with said user device is associated with at least one of the following:

business data, business applications, business software features, and business hardware features.

17. The system of claim 15, wherein said configuration profile associated with said user device is associated with at least one of the following:

personal data, personal applications, personal software features, and personal hardware features.

18. The system of claim 15, wherein said processor is further configured to:

disable said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current location associated with said user device.

19. The system of claim 15, wherein said processor is further configured to:

determine whether said user device is authorized to enable said configuration profile on said user device based at least in part on whether a current time associated with said user device complies with at least one compliance rule specifying at least one time period when said user device is authorized to enable said configuration profile on said user device; and

,

enable said configuration profile on said user device in response to a determination that said user device is authorized to enable said configuration profile on said user device based at least in part on said current time associated with said user device.

20. The system of claim 19, wherein said processor is further configured to:

disable said configuration profile on said user device in response to a determination that said user device is not authorized to enable said configuration profile on said user device based at least in part on said current time associated with said user device.