Mobile device management

• US 8,353,050 B2
• Filed: 09/02/2009
• Issued: 01/08/2013
• Est. Priority Date: 09/02/2009
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Research In Motion Limited (Blackberry Limited)
• Inventors: Klassen, Gerhard Dietrich, Major, Harry Richmond, Gagne, Alain Rene, Creditor, Karen Jean, Boudreau, Jesse J.
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): Cribbs, Malcolm
• Application Number:
  US12/552,836
• Publication Number:
  US 20110055546A1
• Time in Patent Office: 1,224 Days
• Field of Search: 726/1, 726/2, 713168-171, 380/255, 380/270
• US Class Current: 726/27
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/50 Secure pairing of devices
• CPC Class Codes: H04W 84/20 Master-slave selection or change arrangements

Abstract

A device management method, is disclosed in which available features on a slave mobile device are managed (monitored or controlled) by a slave manager module commanded by a master device through secure messages exchanged between the two devices using respective electronic messaging capabilities on the two devices. Selection of the features of the slave mobile device to be controlled or monitored is facilitated on the master device through a master manager module resident thereon. The features that are controlled or monitored may comprise any user-accessible feature incorporated or installed on the slave mobile device and user access to the feature may be prevented according to at least one criterion, such as: date of use, time of day of use, number of times of use, originator and recipient. User access to the feature may be prevented access to the user-accessible feature when usage limitations for the feature have been reached.

Claims

1. A slave mobile device comprising:

a user-accessible communications feature;

a two way electronic messaging capability; and

a non-transitory computer-readable medium having computer-readable instructions stored thereon for execution by a processor, the instructions for implementing a slave manager module capable of;

decrypting at least one of an email, a Short Message Service (SMS) and a Personal Identification Number (PIN) message received through the electronic messaging capability from a paired master device using a secret shared by the slave mobile device and the paired master device, the message including a request,

managing the user-accessible communications feature in accordance with the request by preventing user access to the feature according to at least one criterion comprising reaching a maximum usage limitation, and

overriding the maximum usage limitation to permit the user-accessible communications feature to communicate with authorized persons.

2. The slave mobile device according to claim 1, wherein the user-accessible communications feature is selected from a group consisting of:

a telephone module, an electronic messaging module, a browser module, a game, and a social networking module.

3. The slave mobile device according to claim 1, wherein the at least one criterion is selected from a group consisting of:

number of times of use and number of minutes of use.

4. The slave mobile device of claim 1 wherein the slave mobile device is a handset.

5. The slave mobile device of claim 1, wherein the slave manager module is capable of pairing with a master device to permit encrypted communication between the slave mobile device and the master device through the electronic messaging capability.

6. The slave mobile device of claim 5, wherein the slave manager module is capable of pairing with the master device utilizing a key exchange protocol to jointly establish a shared secret key over an insecure communications channel.

7. A master device comprising:

a two way electronic messaging capability; and

a non-transitory computer-readable medium having computer-readable instructions stored thereon for execution by a processor, the instructions for implementing a master management module capable of generating, encrypting, and transmitting at least one of an email, Short Message Service (SMS) and Personal Identification Number (PIN) message to a paired slave mobile device, the message being transmitted through the electronic messaging capability and including a request to manage a user-accessible communications feature of the slave mobile device in accordance with the request by preventing user access to the feature according to at least one criterion comprising reaching a maximum usage limitation while permitting the usage limitation to be overridden to permit the user-accessible communications feature to communicate with authorized persons, and being encrypted using a secret shared by the master device and the paired slave device.

8. A method of managing a slave mobile device comprising:

decrypting at least one of an email, Short Message Service (SMS) and a Personal Identification Number (PIN) message received through a two-way electronic messaging capability of the slave mobile device using a secret shared by the slave mobile device and the paired master device, the message including a request from a paired master device; and

managing a user-accessible communications feature of the slave mobile device in accordance with the request by preventing user access to the feature according to at least one criterion comprising reaching usage limitations and overriding the maximum usage limitation to permit the user-accessible communications feature to communicate with authorized persons.

9. The method of claim 8, wherein the user-accessible communications feature is selected from a group consisting of:

a telephone module, an electronic messaging module, a browser module, a game, and a social networking module.

10. The method of claim 8, wherein the at least one criterion is selected from a group consisting of:

number of times of use and number of minutes of use.

11. The method of claim 8, wherein the slave mobile device is a handset.