Method for providing wireless application privilege management

• US 10,686,842 B2
• Filed: 11/22/2018
• Issued: 06/16/2020
• Est. Priority Date: 04/18/2005
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Wallis, Kenneth John, Goring, Bryan Richard, Bibr, Viera, Vitanov, Kamen, Fritsch, Laura Brindusa, Shenfield, Michael, Rogers, Jeffrey Christopher
• Primary Examiner(s): Powers, William S
• Application Number:
  US16/198,838
• Publication Number:
  US 20190089749A1
• Time in Patent Office: 572 Days
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 63/205 involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved negotiation of communication capabilities H04L69/24
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 48/08 Access restriction or access information delivery, e.g. discovery data delivery signalling during connection H04W76/00
• CPC Class Codes: H04W 88/02 Terminal devices

Abstract

A method for providing an administration policy to a user device comprising a plurality of applications, the method comprising centrally generating the administration policy to be implemented in the user device, the administration policy comprising at least one of an application administration policy to be used by at least one of the plurality of applications and a client administration policy for the user device; and providing the generated policy to the user device.

Claims

1. A method for generating and providing an administration policy from a server to a wireless device having a plurality of applications in an application container, the method comprising:

centrally generating the administration policy to be implemented in the wireless device, the administration policy including;

an application administration policy to be used by two or more of the plurality of applications in the application container, wherein the application administration policy is used for common management of the two or more individual applications in the application container; and

a client administration policy for the wireless device, wherein the client administration policy is used to manage administration and privilege of the wireless device; and

providing the administration policy to the wireless device.

2. The method as claimed in claim 1, wherein the providing the administration policy to the wireless device occurs over-the-air.

3. The method as claimed in claim 2, wherein an operator managing a plurality of wireless devices performs the generating of the administration policy.

4. The method as claimed in claim 3, wherein the administration policy comprises a plurality of application administration policies, each being assigned to a respective two or more of the plurality of applications and wherein each of the plurality of application administration policies is uniquely identified using an identifier.

5. The method as claimed in claim 4, further comprising automatically generating the identifier.

6. The method as claimed in claim 5, wherein the operator carries out the generating of the identifier.

7. The method as claimed in claim 6, wherein the providing of the generated administration policy to the wireless device comprises transmitting the generated administration policy to the wireless device and installing the transmitted generated policy in the wireless device.

8. The method as claimed in claim 7, wherein the installing of the transmitted generated administration policy in the wireless device comprises installing the client administration policy and installing the application administration policy.

9. The method as claimed in claim 8, wherein the installing of the client administration policy comprises storing the client administration policy in a client administration policy database.

10. The method as claimed in claim 9, wherein the installing of the application administration policy comprises storing the application administration policy in an application administration policy database.

11. The method as claimed in claim 10, wherein the application administration policy database is distinct from the client administration policy database.

12. A computer readable medium storing a plurality of instructions, which instructions, when executed by a processor at a server, cause the processor to:

centrally generate an administration policy to be implemented in a wireless device, the administration policy including;

an application administration policy to be used by two or more of the plurality of applications in the application container, wherein the application administration policy is used for common management of the two or more individual applications in the application container; and

a client administration policy for the wireless device, wherein the client administration policy is used to manage administration and privilege of the wireless device; and

provide the administration policy to the wireless device.

13. The computer readable medium as claimed in claim 12, wherein the instructions cause the processor to provide the administration policy over-the-air to the wireless device.

14. The computer readable medium as claimed in claim 13, wherein the instructions cause the processor to perform, as an operator managing a plurality of wireless devices, the generating of the administration policy to be implemented in the wireless device.

15. The computer readable medium as claimed in claim 14, wherein the administration policy comprises a plurality of application administration policies, each being assigned to a respective two or more of the plurality of applications and wherein each of the plurality of application administration policies is uniquely identified using an identifier.

16. The computer readable medium as claimed in claim 15, wherein the instructions cause the processor to generate the identifier automatically.

17. The computer readable medium as claimed in claim 16, wherein the instructions cause the processor to generate the identifier as the operator.

18. The computer readable medium as claimed in claim 17, wherein the instructions cause the processor to provide the generated administration policy to the wireless device by transmitting the generated administration policy to the wireless device so that the transmitted generated policy may be installed in the wireless device.

19. The computer readable medium as claimed in claim 18, wherein the instructions cause the processor to install the transmitted generated administration policy in the wireless device by installing the client administration policy and installing the application administration policy.

20. The computer readable medium as claimed in claim 19, wherein the instructions cause the processor to install the client administration policy by storing the client administration policy in a client administration policy database.

21. The computer readable medium as claimed in claim 20, wherein the instructions cause the processor to install the application administration policy by storing the application administration policy in an application administration policy database.

22. The computer readable medium as claimed in claim 21, wherein the application administration policy database is distinct from the client administration policy database.

23. A method for receiving and installing an administration policy in a wireless device comprising a plurality of applications in an application container, the method comprising:

receiving, from a central location, the administration policy to be implemented in the wireless device, the administration policy including;

an application administration policy to be used by at two or more of the plurality of applications in the application container, wherein the application administration policy is used for common management of the two or more individual applications in the application container; and

a client administration policy for the wireless device, wherein the client administration policy is used to manage administration and privilege of the wireless device; and

installing the received administration policy in the wireless device.

24. The method as claimed in claim 23, further comprising receiving the administration policy over a wireless link.

25. The method as claimed in claim 24, wherein the installing of the received administration policy in the wireless device comprises storing the client administration policy in a client administration policy database and storing the application administration policy in an application administration policy database.

26. The method as claimed in claim 25, wherein the application administration policy and the client administration policy are received separately.

27. A computer readable memory comprising a plurality of instructions, which instructions, when executed by a processor, cause the processor to:

receive, from a central location, an administration policy to be implemented in a wireless device, the administration policy including;

an application administration policy to be used at two or more of the plurality of applications in the application container, wherein the application administration policy is used for common management of the two or more individual applications in the application container; and

a client administration policy for the wireless device, wherein the client administration policy is used to manage administration and privilege of the wireless device; and

install the received administration policy in the wireless device.

28. The computer readable medium as claimed in claim 27, wherein the instructions cause the processor to receive the administration policy over a wireless link.

29. The computer readable medium as claimed in claim 28, wherein the instructions cause the processor to install the received administration policy in the wireless device by storing the client administration policy in a client administration policy database and storing the application administration policy in an application administration policy database.

30. The computer readable medium as claimed in claim 29, wherein the instructions cause the processor to receive the application administration policy and the client administration policy separately.

31. An application gateway adapted to enable remote administration of one or more managed server units of a data network using a wireless device of a wireless network, the application gateway comprising:

a manager for managing a provisioning of an administration policy to a wireless device having a plurality of applications in an application container, the provisioning including;

generating the administration policy to be implemented in the wireless device, the administration policy including;

an application administration policy to be used by two or more of the plurality of applications in the application container, wherein the application administration policy is used for common management of the two or more individual applications within the application container; and

a client administration policy for the wireless device, wherein the client administration policy is used to manage administration and privilege of the wireless device; and

providing the administration policy to the wireless device.