POLICY PROXY

• US 20170094001A1
• Filed: 12/12/2016
• Published: 03/30/2017
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: BROWN, Michael Kenneth, ADAMS, Neil Patrick, LITTLE, Herbert Anthony
• Granted Patent: US 9,762,691 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

Claims

1. A non-transitory computer-readable medium comprising computer-executable code for execution by a processor of a first device, the first device comprising a first communication interface through which the first device is able to communicate with a policy server and a second communication interface through which the first device is able to communicate with other devices that are unable to communicate with the policy server, wherein execution of the code causes the first device:

to collect information regarding those of the other devices with which the first device is communicating;

to report the information to the policy server;

to contact the policy server to request a policy for at least one of the other devices;

to receive from the policy server a policy for the at least one of the other devices; and

to send all or a portion of the policy to the at least one of the other devices.

2. The non-transitory computer-readable medium of claim 1, wherein the first communication interface is compatible with a first wireless communication standard and the second communication interface is compatible with a second, different wireless communication standard.

3. The non-transitory computer-readable medium of claim 2, wherein the first communication standard is a wireless local area network standard.

4. The non-transitory computer-readable medium of claim 2, wherein the first communication standard is a cellular telephony standard.

5. The non-transitory computer-readable medium of claim 2, wherein the second communication standard is the Bluetooth®

standard.

6. A non-transitory computer-readable medium comprising computer-executable code for execution by a processor of a first device, the first device comprising a first communication interface through which the first device is able to communicate with a policy server over a first communication link and a second communication interface through which the first device is able to communicate with a second device over a second communication link, wherein execution of the code causes the first device:

to receive from the policy server, over the first communication link, a policy for the second device, wherein the second device has a software application for use with the first device and the policy affects how the software application operates; and

to send the policy to the second device, over the second communication link, wherein the second device is not in direct communication with the policy server.

7. The non-transitory computer-readable medium of claim 6, wherein the first device is a mobile electronic device.

8. The non-transitory computer-readable medium of claim 7, wherein the second communication link comprises a wireless communication link.

9. The non-transitory computer-readable medium of claim 6, wherein the policy defines under what circumstances confidential information stored at the second device is deleted.

10. The non-transitory computer-readable medium of claim 6, wherein the policy defines with which devices the second device is allowed to communicate.

11. The non-transitory computer-readable medium of claim 8, wherein the wireless communication link is a wireless local area network link.

12. The non-transitory computer-readable medium of claim 11, wherein the wireless local area network link is a Wireless Local Area Network (WLAN) network compliant with at least one of an IEEE 802.11b standard, an IEEE 802.11n standard, an IEEE 802.11a standard, an IEEE 802.11 g standard, a Zigbee standard, and a Bluetooth®

standard.

13. The non-transitory computer-readable medium of claim 7, wherein at least a segment of the first communication link is a wireless communication link.

14. The non-transitory computer-readable medium of claim 13, wherein the wireless communication link comprises one of a Global System for Mobile Communications GSM network, a General Packet Radio Service GPRS network, an Enhanced Data Rates for Global System for Mobile Communications GSM Evolution EDGE network, a Code Division Multiple Access CDMA network, a wideband CDMA network, a 3.5G network and a 4G network.

15. The non-transitory computer-readable medium of claim 6, wherein execution of the code further causes the first device to send only a portion of the policy to the second device.

16. The non-transitory computer-readable medium of claim 6, wherein execution of the code further causes the first device:

to receive information associated with the second device; and

to send at least part of the information to the policy server.

17. The non-transitory computer-readable medium of claim 16, wherein execution of the code further causes the first device to request the policy from the policy server.

18. The non-transitory computer-readable medium of claim 6, wherein execution of the code further causes the first device to push the policy to the second device.