Apparatus and methods for enforcement of policies upon a wireless device

• US 20090325566A1
• Filed: 06/26/2008
• Published: 12/31/2009
• Est. Priority Date: 06/26/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Bell, Michael, Lovich, Vitali
• Granted Patent: US 8,254,902 B2
• Time in Patent Office: Days
• US Class Current: 455/419
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

Apparatus and methods for changing one or more functional or operational aspects of a wireless device, such as upon the occurrence of a certain event. In one embodiment, the event comprises detecting that the wireless device is within range of one or more other devices. In another variant, the event comprises the wireless device associating with a certain access point. In this manner, various aspects of device functionality may be enabled or restricted (device “policies”). This policy enforcement capability is useful for a variety of reasons, including for example to disable noise and/or light emanating from wireless devices (such as at a movie theater), for preventing wireless devices from communicating with other wireless devices (such as in academic settings), and for forcing certain electronic devices to enter “sleep mode” when entering a sensitive area.

Claims

1. An apparatus comprising:

a first module adapted to detect that a wireless device comprising a first set of functions is within a first range; and

a second module adapted to cause at least one of the first set of functions to be modified based at least in part upon the first module detecting that the wireless device is within the first range.

2. The apparatus of claim 1, wherein the wireless device comprises a cellular-enabled mobile device having a wireless LAN (WLAN) interface, and the apparatus is contained substantially within said mobile device.

3. The apparatus of claim 2, wherein the first set of functions comprises audible ringer functionality, and wherein the modification comprises suppressing or muting the audible ringer functionality.

4. The apparatus of claim 1, wherein the first set of functions comprises a first lighting configuration having a first intensity associated therewith, and wherein the modification comprises a second lighting configuration having a second intensity associated therewith, said second intensity being less than said first intensity.

5. The apparatus of claim 4, wherein the second lighting configuration comprises fewer selectable settings than the first lighting configuration.

6. The apparatus of claim 1, wherein the first set of functions comprises Bluetooth inquiry and pairing functions, and wherein the modification comprises disabling at least one of said inquiry and pairing functions.

7. The apparatus of claim 1, wherein the first set of functions comprises a first power setting, and wherein the modification comprises a second power setting, said second setting consuming less electrical power than said first setting.

8. The apparatus of claim 1, wherein the first set of functions comprises a first security policy, and wherein the modification comprises a second security policy which imposes higher security requirements than said first policy.

9. The apparatus of claim 8, wherein the second access policy comprises at least:

an authentication requirement;

a password requirement; and

an encryption requirement.

10. The apparatus of claim 1, wherein the first set of functions does not require that the wireless device remain in sleep mode, and wherein the modification requires that the wireless device:

(i) enter and remain in sleep mode while within said first range;

or (ii) remain in sleep mode while within said first range if already in said sleep mode when first entering within said first range.

11. The apparatus of claim 1, wherein the first module is adapted to detect that the wireless device is within the first range using at least global positioning system (GPS) signals.

12. The apparatus of claim 1, wherein the first module is adapted to detect that the wireless device is within the first range using at least triangulation based on two or more radio frequency signals.

13. The apparatus of claim 1, wherein the first module is adapted to detect that the wireless device is within the first range based on association or attempted association of the wireless device with a base station or access point.

14. The apparatus of claim 1, wherein the wireless device comprises a cellular-enabled mobile device having a wireless LAN (WLAN) interface, and the apparatus comprises a base station or access point (AP) also having a WLAN interface capable of communicating with the WLAN interface of said mobile device.

15. A method of operating a wireless network having at least one access point, comprising:

providing at least one operational policy for said at least one access point;

enforcing said at least one policy for a user wireless device when said device is associated with said access point, said enforcing comprising defeating user control of at least one component of said wireless device controlled by said at least one policy; and

not enforcing said at least one policy for said wireless device when said device is not associated with said access point.

16. The method of claim 15, wherein said network comprises an IEEE-Std. 802.11 compliant wireless network, said at least one access point comprises an 802.11 Access Point (AP), and said act of providing at least one policy comprises setting a policy which controls an audio subsystem of said user wireless device.

17. The method of claim 16, wherein said user wireless device comprises a mobile device, and said control of said audio subsystem comprises suppressing or muting an audible ringer.

18. The method of claim 16, wherein said act of providing at least one policy comprises setting a policy which enforces a certain behavior in a security subsystem of the user wireless device, said certain behavior comprising utilizing at least one of a prescribed:

(i) encryption scheme;

(ii) authentication scheme; and

(iii) message data integrity scheme.

19. The method of claim 16, wherein said act of providing at least one policy comprises setting a policy which enforces a certain behavior in a display subsystem of the wireless device, said certain behavior in said display subsystem comprising adjusting at least one of the:

(i) brightness; and

(ii) intensity, of a display of said device.

20. The method of claim 15, wherein said wireless network comprises an IEEE-Std. 802.11 compliant wireless network, and the method further comprises determining, via at least said access point, whether to selectively enforce said at least one policy against said user wireless device.

21. The method of claim 15, wherein said wireless network comprises an IEEE-Std. 802.11 compliant wireless network, and the method further comprises determining, via at least said user wireless device, whether to selectively enforce said at least one policy against said user wireless device.

22. The method of claim 15, further comprising providing a user of said user wireless device at least one opportunity of accepting or rejecting association with said access point before said association is created and said at least one policy enforced;

wherein said at least one opportunity comprises generating a display on said wireless device indicating said at least one policy associated with said at least one access point.

23. The method of claim 22, wherein said at least one access point comprises a plurality of policies, and said generating a display comprises generating distinct icons or graphical images for each of said plurality of policies of said at least one access point.

24. The method of claim 15, further comprising configuring said user wireless device so as to implement a user-specific policy, said user-specific policy comprising determining whether or not to associate with said at least one access point based at least in part on said at least one operational policy.

25. The method of claim 15, wherein said at least one access point comprises a plurality of wireless interfaces, each having independent policy functions.

26. The method of claim 15, wherein said defeating user control of at least one component of said wireless device controlled by said at least one policy comprises blocking or disabling user control of at least one of:

(i) an audio or audible function of said wireless device;

or (ii) a display function of said wireless device.

27. A method of operating a wireless network having an access point and a user wireless mobile device having a wireless interface adapted to communicate with said access point, the method comprising:

providing at least one operational policy for said access point;

determining a user-based policy for association between said user wireless device and said access point;

evaluating said at least one operational policy and said user-based policy to determine if said association is permitted; and

if said evaluating indicates that said association is permitted;

creating said association; and

enforcing said at least one policy for said user wireless device when said device is associated with said access point.

28. The method of claim 27, further comprising transmitting a command causing wake-up of said wireless mobile device from a sleep or reduced power mode so as to facilitate said determining said user-based policy.

29. The method of claim 28, further comprising said access point determining whether said wireless mobile device is in said sleep or reduced power mode before said act of transmitting.

30. Network apparatus adapted for communication with at least one mobile user, said apparatus comprising:

first apparatus adapted to provide a wireless interface with a mobile device of said at least one user; and

second apparatus in data communication with said first apparatus and adapted to run a computer program, said computer program adapted to enforce one or more policies with respect to said mobile device during operation thereof and communication with said network apparatus.

31. The apparatus of claim 30, wherein said network apparatus comprises a gateway or access point providing data communication to another network.

32. The apparatus of claim 31, wherein said wireless interface comprises an air interface compliant with IEEE-Std. 802.11.

33. The apparatus of claim 31, wherein said one or more policies comprises a policy that substantially mutes or reduces the volume of an audible sound that would otherwise be generated by said mobile device.

34. The apparatus of claim 31, wherein said one or more policies comprises a policy that substantially reduces at least one of the brightness and intensity of a display device of said mobile device.

35. The apparatus of claim 31, wherein said one or more policies comprises a policy that substantially prevents at least one mode of communication between said mobile device and another proximate mobile device.

36. The apparatus of claim 31, wherein said one or more policies comprises a policy that substantially prevents at least one mode of communication between said mobile device and a radio frequency transceiver distinct from that associated with said wireless interface.

37. The apparatus of claim 36, wherein said radio frequency transceiver comprises a cellular basestation transceiver.

38. The apparatus of claim 36, wherein said radio frequency transceiver comprises a Bluetooth transceiver, and said substantially preventing at least one mode of communication comprises preventing at least one of Bluetooth inquiry or pairing.

39. The apparatus of claim 36, wherein said substantially preventing at least one mode of communication comprises preventing only incoming or received communications, but allowing outgoing communications over said radio frequency transceiver.

40. A wireless device comprising:

a first module adapted to receive a signal from a transmitting device, said signal comprising at least one command adapted to invoke changes in a plurality of functions of said wireless device, said plurality of functions selected from the group consisting of;

(i) a display function;

(ii) an audible alert or alarm function;

(iii) a power conservation mode; and

(iv) a communications interface mode; and

a second module adapted to process said at least one command to change the plurality of functions of the wireless device.

41. The wireless device of claim 40, wherein said device further comprises logic adapted to determine whether a user of said wireless device has agreed to invoke said changes before said command is processed by said second module.

42. The wireless device of claim 40, wherein said device further comprises logic adapted to transmit information relating to whether a user of said wireless device has agreed to invoke said changes to a wireless base station or access point in communication with said wireless device.