System and method for controlling configuration settings for mobile communication devices and services

• US 9,049,071 B2
• Filed: 08/01/2012
• Issued: 06/02/2015
• Est. Priority Date: 10/26/2001
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Godfrey, James A., Chiu, Denny K., Gao, Wen
• Primary Examiner(s): Wong, Warner
• Application Number:
  US13/563,926
• Publication Number:
  US 20120303770A1
• Time in Patent Office: 1,035 Days
• Field of Search: 370/252, 709/221, 709/223
• US Class Current: 1/1
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/10 Multimedia information
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

A method for implementing policy settings in a user device comprising a plurality of applications, wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device, the method comprising determining a set of policy settings for the user device, providing an update of the policy settings and causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device.

Claims

1. A method for implementing an administration policy in a user device comprising a plurality of applications in a runtime environment within the user device;

wherein the administration policy comprises at least one of at least one application administration policy to be used by at least one of the plurality of applications in the runtime environment or at least one runtime environment administration policy for the runtime environment;

wherein the at least one application administration policy is used to provide management of at least one application of the plurality of applications within the runtime environment; and

wherein the at least one runtime environment administration policy is used to manage administration of the runtime environment within the user device;

the method comprising;

receiving an application administration policy request signal from the at least one application, the application administration policy request signal including an indication of an application-specific policy to use;

providing the indicated application-specific application administration policy to the at least one application; and

storing the administration policy in an administration policy database, the administration policy database comprising an application administration policy database that is distinct from a runtime environment administration policy database;

wherein the at least one application-specific application administration policy controls how at least one setting of the at least one application may be user-configurable, and

wherein the application administration policy database is for storing the at least one application administration policy, and the runtime environment administration policy database is for storing the at least one environment administration policy.

4. The method as claimed in claim 1, wherein said user device is a wireless device.

5. The method as claimed in claim 1, wherein said policy comprises a plurality of application administration policies, each being assigned to at least one of the plurality of applications, further wherein each of the plurality of application administration policies is uniquely identified using an identifier, further comprising:

identifying the indicated application-specific application administration policy using the identifier.

6. The method as claimed in claim 1,

wherein the administration policy database is stored at the user device.

7. The method of claim 1 further comprising:

receiving, from a server, at least one of the at least one application administration policy or the at least one runtime environment administration policy.

8. The method of claim 7 further comprising:

installing the at least one of the at least one application administration policy or the at least one runtime environment administration policy.

9. The method as claimed in claim 7, wherein the at least one of the at least one application administration policy or the at least one runtime environment administration policy is received over a wireless link.

2. A method for implementing an administration policy in a user device comprising a plurality of applications in a runtime environment within the user device;

wherein the administration policy comprises at least one of at least one application administration policy to be used by at least one of the plurality of applications in the runtime environment or at least one runtime environment administration policy for the runtime environment;

wherein the at least one application administration policy is used to provide management of at least one application of the plurality of applications within the runtime environment; and

wherein the at least one runtime environment administration policy is used to manage administration of the runtime environment within the user device;

the method comprising;

receiving an application administration policy request signal from the at least one application, the application administration policy request signal including an indication of an application-specific policy to use; and

providing the indicated application-specific application administration policy to the at least one application;

wherein the at least one application-specific application administration policy controls how at least one setting of the at least one application may be user-configurable, and

wherein there are at least two different application administration policies, and at least one of the at least two application administration policies is implementable for a first set of at least one application concurrently with implementation of at least one different application administration policy for a second set of at least one application different from the first set.

3. A method for implementing an administration policy in a user device comprising a plurality of applications in a runtime environment within the user device;

wherein the administration policy comprises at least one of at least one application administration policy to be used by at least one of the plurality of applications in the runtime environment or at least one runtime environment administration policy for the runtime environment;

wherein the at least one application administration policy is used to provide management of at least one application of the plurality of applications within the runtime environment; and

wherein the at least one runtime environment administration policy is used to manage administration of the runtime environment within the user device;

the method comprising;

receiving an application administration policy request signal from the at least one application, the application administration policy request signal including an indication of an application-specific policy to use; and

providing the indicated application-specific application administration policy to the at least one application;

wherein the at least one application-specific application administration policy controls how at least one setting of the at least one application may be user-confiqurable, and

wherein the at least one application administration policy is to be used by two or more applications in the runtime environment, and the at least one application administration policy provides common management of the two or more applications.

10. A non-transitory computer readable memory for implementing an administration policy in a user device, the user device comprising a plurality of applications in a runtime environment within the user device,

wherein the administration policy comprises at least one of at least one application administration policy to be used by at least one of the plurality of applications in the runtime environment or at least one runtime environment administration policy for the runtime environment;

wherein the at least one application administration policy is used to provide management of at least one application of the plurality of applications within the runtime environment; and

wherein the at least one runtime environment administration policy is used to manage administration of the runtime environment within the user device;

the computer readable memory comprising a plurality of instructions which when executed by at least one data processor, cause the at least one data processor to;

receive an application administration policy request signal from the at least one application, the application administration policy request signal including an indication of an application-specific policy to use;

provide the indicated application-specific application administration policy to the at least one application; and

store the administration policy in an administration policy database, the administration policy database comprising an application administration policy database that is distinct from a runtime environment administration policy database

wherein the at least one application-specific application administration policy controls how at least one setting of the at least one application may be user-configurable, and

wherein the application administration policy database is for storing the at least one application administration policy, and the runtime environment administration policy database is for storing the at least one environment administration policy.

21. The non-transitory computer readable medium of claim 10 wherein there are at least two different application administration policies, and at least one of the at least two application administration policies is implementable for a first set of at least one application concurrently with implementation of at least one different application administration policy for a second set of at least one application different from the first set.

22. The non-transitory computer readable medium of claim 10 wherein the at least one application administration policy is to be used by two or more applications in the runtime environment, and the at least one application administration policy provides common management of the two or more applications.

23. The non-transitory computer readable medium as claimed in claim 10, wherein said user device is a wireless device.

24. The non-transitory computer readable medium as claimed in claim 10, wherein said policy comprises a plurality of application administration policies, each being assigned to at least one of the plurality of applications, further wherein each of the plurality of application administration policies is uniquely identified using an identifier, wherein the plurality of instructions when executed by the at least onedata processor further cause the at least one data processor to:

identify the indicated application-specific application administration policy using the identifier.

25. The non-transitory computer readable medium as claimed in claim 10, wherein the

administration policy database is stored at the user device.

26. The non-transitory computer readable medium of claim 10 wherein the plurality of instructions when executed by the at least one data processor further cause the at least one data processor to:

receive, from a server, at least one of the at least one application administration policy or the at least one runtime environment administration policy.

27. The non-transitory computer readable medium of claim 26 wherein the plurality of instructions when executed by the at least one data processor further cause the at least one data processor to:

install the at least one of the at least one application administration policy or the at least one runtime environment administration policy.

28. The non-transitory computer readable medium as claimed in claim 26, wherein the at least one of the at least one application administration policy or the at least one runtime environment administration policy is received over a wireless link.

11. A method for implementing policy settings in a user device comprising a plurality of applications;

wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device;

the method comprising;

determining a set of policy settings for the user device;

providing an update of the policy settings;

storing the policy settings in a policy database, the policy database comprising an application policy database that is distinct from a client policy database; and

causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device,

wherein at least one of the policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable, and

wherein the application policy database is for storing the at least one application policy setting, and the client policy database is for storing the at least one client policy setting.

12. The method of claim 11, wherein providing an update of the policy settings comprises transmitting the determined policy settings to the user device.

13. The method of claim 12 wherein the determined policy settings are transmitted over a wireless link.

16. The method as claimed in claim 11, wherein said user device is a wireless device.

17. The method as claimed in claim 11, further comprising:

storing the policy settings in a database of a server.

18. The method as claimed in claim 17, wherein the policy settings associated with the user device of a user are stored in an information record associated with the user.

19. The method of claim 18, wherein providing an update of the policy settings comprises updating a user information record in accordance with the determined policy settings.

14. A method for implementing policy settings in a user device comprising a plurality of applications;

wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device;

the method comprising;

determining a set of policy settings for the user device;

providing an update of the policy settings; and

causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device,

wherein at least one of the policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable, and

wherein the policy settings comprise at least two different application policy settings concurrently implementable for management of at least two different applications, respectively.

15. A method for implementing policy settings in a user device comprising a plurality of applications;

wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device;

the method comprising;

determining a set of policy settings for the user device;

providing an update of the policy settings; and

causing implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device,

wherein at least one of the policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable, and

wherein the policy settings comprise at least one application policy setting for common management of two or more applications.

20. A non-transitory computer readable memory for implementing policy settings in a user device, the user device comprising a plurality of applications, wherein the policy settings comprise at least one application policy setting for managing at least one of the plurality of applications and at least one client policy setting for managing the user device;

the computer readable memory comprising a plurality of instructions which when executed by at least one data processor cause the at least one data processor to;

determine a set of policy settings for the user device;

provide an update of the policy settings;

store the policy settings in a policy database, the policy database comprising an application policy database that is distinct from a client policy database; and

cause implementation of the policy settings by the user device, to control management of the at least one of the plurality of applications and management of the user device,

wherein at least one of the policy settings controls how at least one setting of the at least one of the plurality of applications may be user-configurable, and

wherein the application policy database is for storing the at least one application policy setting, and the client policy database is for storing the at least one client policy setting.

29. The non-transitory computer readable medium of claim 20, wherein providing an update of the policy settings comprises transmitting the determined policy settings to the user device.

30. The non-transitory computer readable medium of claim 29 wherein the determined policy settings are transmitted over a wireless link.

31. The non-transitory computer readable medium of claim 20 wherein the policy settings comprise at least two different application policy settings concurrently implementable for management of at least two different applications, respectively.

32. The non-transitory computer readable medium of claim 20 wherein the policy settings comprise at least one application policy setting for common management of two or more applications.

33. The non-transitory computer readable medium as claimed in claim 20, wherein said user device is a wireless device.

34. The non-transitory computer readable medium as claimed in claim 20, wherein the plurality of instructions when executed by the at least one data processor further cause the at least one data processor to:

store the policy settings in a database of a server.

35. The non-transitory computer readable medium as claimed in claim 34, wherein the policy settings associated with the user device of a user are stored in an information record associated with the user.

36. The non-transitory computer readable medium of claim 35, wherein providing an update of the policy settings comprises updating a user information record in accordance with the determined policy settings.