System and method for distribution of security policies for mobile devices

• US 20060242685A1
• Filed: 09/23/2002
• Published: 10/26/2006
• Est. Priority Date: 09/23/2002
• Status: Active Grant

• Current Assignee: Dell Marketing LP (Dell Technologies Inc.)
• Original Assignee: Credant Technologies Incorported (Dell Technologies Inc.)
• Inventors: Mann, Dwayne R., Burchett, Christopher D., Gordon, Ian R., Heard, Robert W.
• Granted Patent: US 7,665,125 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/12 Transmitting and receiving encryption devices synchronised or initially set up in a particular manner
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications

Abstract

In a particular embodiment, a wireless security system is disclosed. The wireless security system includes a client module deployed on a wireless device, a network module, and a server module. The client module is adapted to authenticate a wireless device while the wireless device is operating independently from the network module and the server module. In another embodiment, a method of distributing security policy information from a server to a mobile computing device is disclosed. The method includes authentication of a connection between the server and a gatekeeper, sending a policy package to the gatekeeper, initiating data synchronization between the mobile computing device and the gatekeeper, authenticating the mobile computing device, and sending the policy package from the gatekeeper to the mobile computing device.

Claims

1. A wireless security system, comprising:

a client module deployed on a wireless device;

a network module selectively coupled to the client module during synchronization; and

a server module coupled to the network module,

wherein the client module is adapted to authenticate use of a wireless computing device independent of the network module and the server module.

2. The system of claim 1, wherein a policy database of the client module is updated when the wireless device is coupled to the network access node.

3. The system of claim 1, wherein an activity log of the client module is communicated to the server module, via the network module, when the wireless device is accessible to the network module.

4. A method of installing a security software application from a network module to a mobile computing device, the method comprising:

providing a network module, the network module including security policies and key material, the security policies and key material communicated to the network module from a server;

when the mobile device is synchronizing with the network module, initiating installation of a security software program onto the mobile security device;

requesting a one-time password;

receiving the one-time password at the mobile computing device; and

using the one-time password to decrypt a root key associated with the key materials.

5. The method of claim 4, further comprising completing the installation of the security software at the mobile computing device and receiving a user personal identification number and a new password at the mobile computing device.

6. The method of claim 4, further comprising receiving a user phrase at the mobile computing device.

7. The method of claim 6, further comprising encrypting the root key using each of the new password, the personal identification number, and the user phrase.

8. The method of claim 4, wherein the security software on the network module comprises a gatekeeper software application and wherein the security software on the mobile computing device comprises a shield software application.

9. A method of distributing security policy information from a server to a mobile computing device, the method comprising:

authenticating a connection between the server and a gatekeeper;

sending a policy package to the gatekeeper;

initiating data synchronization between the mobile computing device and the gatekeeper;

authenticating the mobile computing device; and

sending the policy package from the gatekeeper to the mobile computing device.

10. The method of claim 9 further comprising decrypting the policy package at the mobile computing device.

11. The method of claim 10 further comprising activating policies at the mobile computing device, the activated policies derived from the decrypted policy package.

12. The method of claim 9, wherein the policy package includes a new security policy entered by an administrator.

13. The method of claim 9, wherein the policy package includes a modified policy, the modified policy entered by a user via an administrative interface to the server.