System and method for managing wireless devices in an enterprise

• US 7,907,565 B2
• Filed: 04/21/2003
• Issued: 03/15/2011
• Est. Priority Date: 04/19/2002
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Computer Associates Think Inc. (Broadcom, Inc.)
• Inventors: Jain, Sandeep, Srinivas, Davanum, Fry, Michael, Saborowski, Ralf, Van de Groenendaal, Johan, Zalewski, Andrzej
• Primary Examiner(s): Pham; Chi H
• Assistant Examiner(s): HYUN, SOON D
• Application Number:
  US10/420,022
• Publication Number:
  US 20040005873A1
• Time in Patent Office: 2,885 Days
• Field of Search: 370/328, 370/331, 370/332, 370/338, 370/311, 370/252, 370/310.1, 370/333
• US Class Current: 370/329
• CPC Class Codes: H04L 41/0631 using root cause analysis; using analysis of correlation between notifications, alarms or events based on decision criteria, e.g. hierarchy, tree or time analysis
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/00 Arrangements for monitoring or testing data switching networks
• CPC Class Codes: H04L 43/0817 by checking functioning
• CPC Class Codes: H04L 43/0882 Utilisation of link capacity
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/128 Anti-malware arrangements, e.g. protection against SMS fraud or mobile malware
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Methods and systems are disclosed for managing wireless devices in an enterprise. A first exemplary method manages the physical access points of a wireless network in an enterprise. A second exemplary method manages the assets of wireless devices in an enterprise. A third exemplary method enables virus detection within wireless devices. A fourth exemplary method manages wireless device data backup.

Claims

1. A method for managing a wireless device in a network, the method comprising:

identifying a plurality of authorized logical wireless access points within a network;

detecting a plurality of physical wireless access points within the network;

determining, by a computer, for each of the plurality of physical wireless access points, whether the physical wireless access point is associated with one of the plurality of authorized logical wireless access points; and

reporting each physical wireless access point that is not associated with an authorized logical wireless access points.

2. The method of claim 1, further comprising:

detecting a plurality of wireless devices, including determining the associated physical wireless access point; and

creating a topological map of the network reflecting the relationship between each of the plurality wireless devices and the respectively associated physical wireless access point.

3. The method of claim 1, further comprising:

defining a preferred metric value associated with a wireless device;

detecting the wireless devices, including determining an actual metric value; and

comparing the determined metric value to the preferred metric value to determine whether the wireless device is operating improperly; and

reporting whether the wireless device is operating improperly.

4. The method of claim 3, wherein the preferred metric is a measurement of transmission power.

5. The method of claim 3, wherein the preferred metric is a measurement of acceptable interference.

6. The method of claim 3, wherein the preferred metric is a fragmentation count.

7. The method of claim 3, wherein the preferred metric is a transmission speed.

8. The method of claim 3, wherein the preferred metric is a failure count.

9. The method of claim 1, further comprising:

defining a security policy associated with a wireless device;

detecting the wireless device, including obtaining security information associated with the device;

determining that the security information violates the security policy; and

reporting a security violation.

10. The method of claim 9, wherein the security policy defines an authorized user ID/password combination, and wherein the security information is an unauthorized user ID/password combination.

11. The method of claim 9, wherein the security policy defines an authorized wireless device identifier, and the security information is an unauthorized wireless device identifier.

12. A method for managing a wireless device in a network, the method comprising:

defining a set of authorized assets associated with a wireless device on a network;

detecting the wireless device on the network;

determining the actual assets associated with the wireless device;

analyzing, by a computer, the set of authorized assets and the actual assets to identify at least one flagged asset; and

reporting the at least one flagged asset.

13. The method of claim 12, wherein analyzing includes determining whether each actual asset is part of the set of authorized assets;

and

wherein each flagged asset is an actual asset that is not part of the set of authorized assets.

14. The method of claim 12, wherein analyzing includes determining whether each authorized asset is an actual asset;

and

wherein each flagged asset is an authorized asset that is not an actual asset.

15. The method of claim 12, wherein an authorized asset is a software application having a version identifier.

16. The method of claim 12, wherein an authorized asset is a hardware device having an identifier.

17. The method of claim 12, wherein the flagged asset is a software application, and the method further includes:

delivering the software application to the wireless device.