Policy proxy

• US 8,261,338 B2
• Filed: 03/29/2008
• Issued: 09/04/2012
• Est. Priority Date: 04/04/2005
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Blackberry Limited
• Inventors: Brown, Michael K., Adams, Neil P., Little, Herbert A.
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US12/058,684
• Publication Number:
  US 20080289001A1
• Time in Patent Office: 1,620 Days
• Field of Search: None
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
• CPC Class Codes: H04W 84/042 Public Land Mobile systems, e.g. cellular systems
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/06 adapted for operation in multiple networks or having at least two operational modes, e.g. multi-mode terminals

Abstract

In a system with a policy server, a first device able to communicate with the policy server and a second device able to communicate with the first device and unable to communicate with the policy server, the first device is to act as a policy proxy. The policy server may push to the first device a policy for the second device, and the first device may push the policy to the second device.

Claims

1. A method in a first electronic device that is able to communicate with a policy server over a first communication link and is able to communicate with a second electronic device over a second communication link, the method comprising:

receiving at said first electronic device a policy sent from said policy server over said first communication link, where said policy is for said second electronic device that has a software application for use with said first electronic device and said policy affects how said software application operates; and

sending said policy from said first electronic device to said second electronic device over said second communication link, wherein said second electronic device is not in direct communication with said policy server.

2. The method of claim 1, wherein said first electronic device is a mobile electronic device.

3. The method of claim 2, wherein said second communication link comprises a wireless communication link.

4. The method of claim 2, wherein said second electronic device comprises a smart card reader.

5. The method of claim 2, wherein said policy defines under what circumstances confidential information stored at said second electronic device is deleted.

6. The method of claim 2, wherein said policy defines with which devices said second electronic device is allowed to communicate.

7. The method of claim 2, wherein said second electronic device is a printer.

8. The method of claim 7, wherein said policy defines which at least one of fonts, template information, and printer resolution are to be used by said printer.

9. The method of claim 7, wherein said policy defines with which devices said printer is allowed to connect.

10. The method of claim 3, wherein said wireless communication link is a wireless local area network link.

11. The method of claim 10, wherein said wireless local area network link is a Wireless Local Area Network (WLAN) network compliant with at least one of an IEEE 802.11b standard, an IEEE 802.11n standard, an IEEE 802.11a standard, an IEEE 802.11 g standard, a Zigbee standard, and a Bluetooth standard.

12. The method of claim 2, wherein at least a segment of said first communication link is a wireless communication link.

13. The method of claim 12, wherein said wireless communication link comprises one of a Global System for Mobile Communications GSM network, a General Packet Radio Service GPRS network, an Enhanced Data Rates for Global System for Mobile Communications GSM Evolution EDGE network, a Code Division Multiple Access CDMA network, a wideband CDMA network, a 3.5G network and a 4G network.

14. The method of claim 1, further comprising sending only a portion of said policy to said second electronic device.

15. The method of claim 1, further comprising:

receiving information associated with said second electronic device; and

sending at least part of said information to said policy server.

16. The method of claim 15, further comprising requesting said policy from said policy server.

17. The method of claim 1, wherein sending said policy to said second electronic device further comprises pushing said policy from said first electronic device.

18. A first electronic device that is able to communicate with a policy server over a first communication link and is able to communicate with a second electronic device over a second communication link, said first electronic device comprising:

a processor;

a first communication interface coupled to said processor for communication over said first communication link, and a second communication interface coupled to said processor for communication over said second communication link;

a memory coupled to said processor, said memory storing instructions executable by said processor, said instructions being adapted to;

receive at said first electronic device a policy sent from said policy server over said first communication link, where said policy is for said second electronic device that has a software application for use with said first electronic device and said policy affects how said software application operates; and

send said policy from said first electronic device to said second electronic device over said second communication link,

wherein said second electronic device is not in direct communication with said policy server.

19. The first electronic device of claim 18, wherein said first electronic device is a mobile electronic device.

20. The first electronic device of claim 19, wherein said second communication link comprises a wireless communication link.

21. The first electronic device of claim 19, wherein said second electronic device comprises a smart card reader.

22. The first electronic device of claim 19, wherein said policy defines under what circumstances confidential information stored at said second electronic device is deleted.

23. The first electronic device of claim 19, wherein said policy defines with which devices said second electronic device is allowed to communicate.

24. The first electronic device of claim 19, wherein said second electronic device is a printer.

25. The first electronic device of claim 24, wherein said policy defines which at least one of fonts, template information, and printer resolution are to be used by said printer.

26. The first electronic device of claim 24, wherein said policy defines with which devices said printer is allowed to connect.

27. The first electronic device of claim 20, wherein said wireless communication link is a wireless local area network link.

28. The first electronic device of claim 27, wherein said wireless local area network link is a Wireless Local Area Network (WLAN) network compliant with at least one of an IEEE 802.11b standard, an IEEE 802.11n standard, an IEEE 802.11a standard, an IEEE 802.11 g standard, a Zigbee standard, and a Bluetooth standard.

29. The first electronic device of claim 19, wherein at least a segment of said first communication link is a wireless communication link.

30. The first electronic device of claim 29, wherein said wireless communication link comprises one of a Global System for Mobile Communications GSM network, a General Packet Radio Service GPRS network, an Enhanced Data Rates for Global System for Mobile Communications GSM Evolution EDGE network, a Code Division Multiple Access CDMA network, a wideband CDMA network, a 3.5G network and a 4G network.

31. The first electronic device of claim 18, further adapted to send only a portion of said policy to said second electronic device.

32. The first electronic device of claim 18, further adapted to:

receive information associated with said second electronic device; and

send at least part of said information to said policy server.

33. The first electronic device of claim 32, further adapted to request said policy from said policy server.

34. The first electronic device of claim 18, further adapted to push said policy from said first electronic device to said second electronic device.