Method for providing wireless application privilege management

• US 9,059,891 B2
• Filed: 12/19/2012
• Issued: 06/16/2015
• Est. Priority Date: 04/18/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Wallis, Kenneth, Goring, Bryan Richard, Bibr, Viera, Vitanov, Kamen, Shenfield, Michael, Rogers, Jeffrey Christopher, Fritsch, Laura Brindusa
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Sanders, Stephen
• Application Number:
  US13/719,388
• Publication Number:
  US 20130117430A1
• Time in Patent Office: 909 Days
• Field of Search: 726/1
• US Class Current: 1/1
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for providing an administration policy to a user device comprising a plurality of applications, the method comprising centrally generating the administration policy to be implemented in the user device, the administration policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for the user device; and providing the generated policy to the user device.

Claims

1. A method for implementing an administration policy in a user device, the administration policy comprising at least one application administration policy used to provide management of at least one application in a runtime environment implemented on the user device, and at least one runtime environment administration policy used to manage administration of the runtime environment, the method comprising:

receiving an application administration policy request signal including an indication of an application-specific application administration policy to use for at least one specific application; and

providing the indicated application-specific application administration policy to the at least one specific application.

2. The method of claim 1 wherein there are at least two different application administration policies, and at least one of the at least two application administration policies is implementable for at least a first application concurrently with implementation of at least one different application administration policy for at least a second application.

3. The method of claim 1 wherein at least one of the at least one application administration policy provides common management of two or more applications.

4. The method as claimed in claim 1, wherein the user device is a wireless device.

5. The method as claimed in claim 1, wherein the administration policy comprises a plurality of application administration policies, each being uniquely identified using an identifier, the method further comprising:

identifying the indicated application-specific application administration policy using the identifier.

6. The method as claimed in claim 1, further comprising:

causing the provided administration policy in an administration policy database of the user device.

7. The method as claimed in claim 6, wherein the administration policy database comprises an application administration policy database that is distinct from a runtime environment administration policy database;

wherein the application administration policy database is for storing the at least one application administration policy, and the runtime environment administration policy database is for storing the at least one runtime environment administration policy.

8. The method of claim 1 further comprising:

receiving, from a server, at least one of the at least one application administration policy and at least one of the at least one runtime environment administration policy.

9. The method of claim 8 further comprising:

installing the at least one of the at least one application administration policy and the at least one of the at least one runtime environment administration policy.

10. The method as claimed in claim 8, wherein the at least one of the at least one application administration policy and the at least one of the at least one runtime environment administration policy is received over a wireless link.

11. A computer readable memory comprising a plurality of instructions which when executed causes a system to perform the method as claimed in claim 1.

12. A user device for implementing an administration policy, the administration policy comprising at least one application administration policy used to provide management of at least one application in a runtime environment implemented on the user device, and at least one runtime environment administration policy used to manage administration of the runtime environment, the user device comprising:

a processor for executing computer-readable instructions to cause the user device to;

receive an application administration policy request signal including an indication of an application-specific application administration policy to use for at least one specific application; and

provide the indicated application-specific application administration policy to the at least one specific application.

13. The user device of claim 12 wherein there are at least two different application administration policies, and at least one of the at least two application administration policies is implementable for at least a first application concurrently with implementation of at least one different application administration policy for at least a second application.

14. The user device of claim 12 wherein at least one of the at least one application administration policy provides common management of two or more applications.

15. The user device of claim 12, wherein the user device is a wireless device.

16. The user device of claim 12, wherein the administration policy comprises a plurality of application administration policies, each being uniquely identified using an identifier, the indicated application-specific application administration policy being identified using the identifier.

17. The user device of claim 12, wherein the instructions further cause the user device to:

store the provided administration policy in an administration policy database.

18. The user device of claim 17, wherein the administration policy database comprises an application administration policy database that is distinct from a runtime environment administration policy database;

wherein the application administration policy database is for storing the at least one application administration policy, and the runtime environment administration policy database is for storing the at least one runtime environment administration policy.

19. The user device of claim 12, wherein the instructions further cause the user device to:

receive, from a server, at least one of the at least one application administration policy and at least one of the at least one runtime environment administration policy.

20. The user device of claim 12, wherein the instructions further cause the user device to:

install the at least one of the at least one application administration policy and the at least one of the at least one runtime environment administration policy.

21. The user device of claim 19, wherein the at least one of the at least one application administration policy and the at least one of the at least one runtime environment administration policy is received over a wireless link.