System and method for controlling a mobile device

• US 8,490,176 B2
• Filed: 04/07/2010
• Issued: 07/16/2013
• Est. Priority Date: 04/07/2009
• Status: Active Grant

• Current Assignee: Pulse Secure, LLC (Ivanti Software, Inc.)
• Original Assignee: Juniper Networks Incorporated
• Inventors: Hoffman, Daniel V., Book, Neil
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): Almamun, Abdullah
• Application Number:
  US12/756,001
• Publication Number:
  US 20110065419A1
• Time in Patent Office: 1,196 Days
• Field of Search: 726/1, 726/2, 726/17, 726/25, 726 26- 30
• US Class Current: 726/17
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/552 involving long-term monitoring or reporting
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04M 2203/6081 Service authorization mechanisms
• CPC Class Codes: H04M 3/38 Graded-service arrangements, i.e. some subscribers prevented from establishing certain connections queuing arrangements H04Q3/64
• CPC Class Codes: H04M 3/42161 via computer interface
• CPC Class Codes: H04M 3/436 Arrangements for screening incoming calls , i.e. evaluating the characteristics of a call before deciding whether to answer it based on the calling party profile H04M3/42059; based on location H04M3/42348; based on presence H04M3/42365; diversion H04M3/54
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

A system includes a controlling module for controlling a mobile device remotely A system includes a controlling module for controlling a mobile device remotely, wherein the controlling module includes a parental control module for controlling a mobile device used by a child. A system includes a controlling module for controlling a mobile device remotely, wherein the controlling module includes a parental control module for controlling a mobile device used by a child, wherein the parental control module includes a monitoring module for monitoring a use of the mobile device, and a filtering module for filtering an inappropriate content.

Claims

1. A system, comprising:

a mobile device comprising a processing unit; and

a controlling module for controlling the mobile device remotely, the controlling module comprising;

a monitoring module for monitoring a use of the mobile device, the monitoring module comprising a policy setting module for determining a use policy for what use is permitted on the mobile device; and

an application control module, executed by the processing unit of the mobile device, for controlling whether applications are allowed to run on the mobile device, wherein the application control module executes silently on the mobile device and cannot be disabled, the application control module comprising;

an application blocking module for blocking an installation of an unauthorized application in accordance with the use policy; and

an application authorization policy module for authorizing an installation of an authorized application in accordance with the use policy,

wherein to prevent the application control module from being disabled, the application control module further comprises;

a heartbeat monitoring module for automatically restarting the application control module if the application control module terminates.

2. The system of claim 1, wherein to prevent the application control module from being disabled, the application control module further comprises:

a password protected uninstall module for preventing an uninstalling of the application control module with password protection.

3. The system of claim 1, wherein to prevent the application control module from being disabled, the application control module further comprises:

an uninstall notification module for notifying sending a notification indicating an occurrence of at least one of an attempted uninstall or an attempted modification of the application control module in response to the occurrence.

4. A method, comprising:

receiving, by an application control module executed by a processing unit of a mobile device from a monitoring module for monitoring use of the mobile device, data defining a use policy for what use is permitted on the mobile device;

controlling, by the application control module, whether applications are allowed to run on the mobile device in accordance with the use policy, wherein controlling comprises;

blocking installation of an unauthorized application in accordance with the use policy; and

authorizing installation of an authorized application in accordance with the use policy; and

preventing disabling of the application control module, wherein preventing disabling of the application control module comprises;

monitoring a heartbeat of the application control module to determine whether the application control module has terminated without authorization; and

automatically restarting the application control module if the application control module terminates without authorization.

5. The method of claim 4, wherein preventing disabling of the application control module comprises:

preventing an uninstalling of the application control module with password protection.

6. The method of claim 4, wherein preventing disabling of the application control module comprises:

sending a notification indicating an occurrence of at least one of an attempted uninstall or an attempted modification of the application control module in response to the occurrence.

7. A non-transitory computer-readable storage medium comprising instructions that, when executed, cause a processor of a mobile device to:

execute an application control module;

receive, by the application control module from a monitoring module for monitoring use of the mobile device, data defining a use policy for what use is permitted on the mobile device; and

control, by the application control module, whether applications are allowed to run on the mobile device in accordance with the use policy, wherein the instructions that cause the processor to control whether applications are allowed to run comprise instructions that cause the processor to;

block installation of an unauthorized application in accordance with the use policy,

authorize installation of an authorized application in accordance with the use policy; and

prevent disabling of the application control module, wherein the instructions that cause the processor to prevent disabling of the application control module comprise instructions that cause the processor to;

monitor a heartbeat of the application control module to determine whether the application control module has terminated without authorization; and

automatically restart the application control module if the application control module terminates without authorization.

8. The non-transitory computer-readable storage medium of claim 7, wherein the instructions that cause the processor to prevent disabling of the application control module comprise instructions that cause the processor to:

prevent an uninstalling of the application control module with password protection.

9. The non-transitory computer-readable storage medium of claim 7, wherein the instructions that cause the processor to prevent disabling of the application control module comprise instructions that cause the processor to:

send a notification indicating an occurrence of at least one of an attempted uninstall or an attempted modification of the application control module in response to the occurrence.

10. A mobile device, comprising:

a computer-readable medium having stored thereon instructions for an application control module comprising an application blocking module and an application authorization policy module; and

a processing unit configured to execute the application control module, such that the application control module executes silently on the mobile device and cannot be disabled, wherein the application control module is configured to receive, from a monitoring module for monitoring use of the mobile device, data defining a use policy for what use is permitted on the mobile device, and control whether applications are allowed to run on the mobile device,

wherein the application blocking module is configured to block an installation of an unauthorized application in accordance with the use policy, and wherein the application authorization policy module is configured to authorize an installation of an authorized application in accordance with the use policy, and

wherein to prevent the application control module from being disabled, the application control module comprises a heartbeat monitoring module configured to automatically restart the application control module if the application control module terminates.

11. The mobile device of claim 10, wherein to prevent the application control module from being disabled, the application control module comprises a password protected uninstall module configured to prevent an uninstalling of the application control module with password protection.

12. The mobile device of claim 10, wherein to prevent the application control module from being disabled, the application control module comprises an uninstall notification module configured to send a notification indicating an occurrence of at least one of an attempted uninstall or an attempted modification of the application control module in response to the occurrence.