Location-based configuration policy toggling

• US 9,426,162 B2
• Filed: 05/02/2013
• Issued: 08/23/2016
• Est. Priority Date: 05/02/2013
• Status: Active Grant

• Current Assignee: Omnissa, LLC
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Marshall, John, Stuntebeck, Erich
• Primary Examiner(s): Meky, Moustafa M
• Application Number:
  US13/875,426
• Publication Number:
  US 20140330945A1
• Time in Patent Office: 1,209 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06Q 10/06314 Calendaring for a resource
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Location-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on location constraints, and the configuration profiles may be enabled on the user devices if the location constraints are satisfied.

Claims

1. A system comprising:

at least one memory storage; and

at least one processor coupled to the at least one memory storage, wherein the at least one processor is configured to;

identify at least one configuration profile associated with at least one user device;

determine whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on whether the current location associated with the at least one user device complies with at least one compliance rule, the compliance rule specifying that the at least one user device is authorized to enable the at least one configuration profile when the at least one user device is within a proximity of a second device, the second device being a mobile device; and

,

enable the at least one configuration profile in response to a determination that the at least one user device is within the proximity of the second device.

2. The system of claim 1, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of business data, business applications, business software features, and business hardware features.

3. The system of claim 1, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of personal data, personal applications, personal software features, and personal hardware features.

4. The system of claim 1, wherein the at least one processor is further configured to:

disable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device.

5. The system of claim 1, wherein the at least one processor is further configured to:

determine whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on whether the current time associated with the at least one user device complies with at least one compliance rule specifying at least one time period when the at least one user device is authorized to enable the at least one configuration profile on the at least one user device; and

,

enable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

6. The system of claim 5, wherein the at least one processor is further configured to:

disable the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

7. A method comprising:

identifying at least one configuration profile associated with at least one user device;

determining whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on the current location associated with the at least one user device; and

,

enabling the at least one configuration profile on the at least one user device in response to determining that the at least one user device is within a proximity of a second device, the second device being a mobile device.

8. The method of claim 7, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of business data, business applications, business software features, and business hardware features.

9. The method of claim 7, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of personal data, personal applications, personal software features, and personal hardware features.

10. The method of claim 7, wherein determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device comprises determining whether the current location associated with the at least one user device complies with at least one compliance rule specifying at least one location where the at least one user device is authorized to enable the at least one configuration profile on the at least one user device.

11. The method of claim 7, further comprising:

disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current location associated with the at least one user device.

12. The method of claim 7, further comprising:

determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device; and

,

enabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

13. The method of claim 12, wherein determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device comprises determining whether the current time associated with the at least one user device complies with at least one compliance rule specifying at least one time period when the at least one user device is authorized to enable the at least one configuration profile on the at least one user device.

14. The method of claim 12, further comprising:

disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

15. A non-transitory computer-readable medium which stores a set of instructions that when executed performs a method executed by the set of instructions comprising:

identifying at least one configuration profile on at least one user device;

determining whether the at least one user device is authorized to enable the at least one configuration profile based at least in part on the current location associated with the at least one user device; and

,

disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not within a proximity of a second device, the second device being a mobile device.

16. The non-transitory computer-readable medium of claim 15, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of business data, business applications, business software features, and business hardware features.

17. The non-transitory computer-readable medium of claim 15, wherein the at least one configuration profile associated with the at least one user device is specifically related to at least one of personal data, personal applications, personal software features, and personal hardware features.

18. The non-transitory computer-readable medium of claim 15, further comprising:

enabling at least one configuration profile that the at least one user device is authorized to enable based at least in part on the current location associated with the at least one user device in response to disabling the at least one configuration profile on the at least one user device that was not authorized to be enabled on the at least one user device based at least in part on the current location associated with the at least one user device.

19. The non-transitory computer-readable medium of claim 15, further comprising:

determining whether the at least one user device is authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device; and

,

disabling the at least one configuration profile on the at least one user device in response to a determination that the at least one user device is not authorized to enable the at least one configuration profile on the at least one user device based at least in part on the current time associated with the at least one user device.

20. The non-transitory computer-readable medium of claim 19, further comprising:

enabling at least one configuration profile that the at least one user device is authorized to enable based at least in part on the current time associated with the at least one user device in response to disabling the at least one configuration profile on the at least one user device that was not authorized to be enabled on the at least one user device based at least in part on the current time associated with the at least one user device.