Apparatus and Methods for Enforcement of Policies Upon a Wireless Device

• US 20140199985A1
• Filed: 03/17/2014
• Published: 07/17/2014
• Est. Priority Date: 06/26/2008
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Lovich, Vitali, Bell, Michael
• Granted Patent: US 9,100,813 B2
• Time in Patent Office: Days
• US Class Current: 455/418
• CPC Class Codes: H04W 12/088 using filters or firewalls
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/20 Services signaling; Auxiliary data signalling, i.e. transmitting data via a non-traffic channel
• CPC Class Codes: H04W 48/04 based on user or terminal location or mobility data, e.g. moving direction, speed
• CPC Class Codes: H04W 8/22 Processing or transfer of terminal data, e.g. status or physical capabilities

Abstract

Apparatus and methods for changing one or more functional or operational aspects of a wireless device, such as upon the occurrence of a certain event. In one embodiment, the event comprises detecting that the wireless device is within range of one or more other devices. In another variant, the event comprises the wireless device associating with a certain access point. In this manner, various aspects of device functionality may be enabled or restricted (device “policies”). This policy enforcement capability is useful for a variety of reasons, including for example to disable noise and/or light emanating from wireless devices (such as at a movie theater), for preventing wireless devices from communicating with other wireless devices (such as in academic settings), and for forcing certain electronic devices to enter “sleep mode” when entering a sensitive area.

Claims

1. A computer-program storage apparatus for operating a wireless network having at least one access point comprising a memory having one or more computer programs stored thereon, the one or more computer programs being executable by one or more processors and the one or more computer programs comprising:

instructions for providing at least one operational policy for said at least one access point;

instructions for enforcing said at least one policy for a user wireless device when said device is associated with said access point, said instructions for enforcing comprising instructions for defeating user control of at least one component of said wireless device controlled by said at least one policy; and

instructions for not enforcing said at least one policy for said wireless device when said device is not associated with said access point.

2. The apparatus of claim 1, wherein said network comprises an IEEE-Std. 802.11 compliant wireless network, said at least one access point comprises an 802.11 Access Point (AP), and said instructions for providing at least one policy comprises instructions for setting a policy which controls an audio subsystem of said user wireless device.

3. The apparatus of claim 2, wherein said user wireless device comprises a mobile device, and said instructions for setting a policy which controls said audio subsystem comprises instructions for suppressing or muting an audible ringer.

4. The apparatus of claim 2, wherein said instructions for providing at least one policy comprises instructions for setting a policy which enforces a certain behavior in a security subsystem of the user wireless device, said certain behavior comprising utilizing at least one of a prescribed:

(i) encryption scheme;

(ii) authentication scheme; and

(iii) message data integrity scheme.

5. The apparatus of claim 2, wherein said instructions for providing at least one policy comprises instructions for setting a policy which enforces a certain behavior in a display subsystem of the wireless device, said certain behavior in said display subsystem comprising adjusting at least one of the:

(i) brightness; and

(ii) intensity, of a display of said device.

6. The apparatus of claim 1, wherein said wireless network comprises an IEEE-Std. 802.11 compliant wireless network, and the one or more computer programs further comprises instructions for determining, via at least said access point, whether to selectively enforce said at least one policy against said user wireless device.

7. The apparatus of claim 1, wherein said wireless network comprises an IEEE-Std. 802.11 compliant wireless network, and the one or more computer programs further comprises instructions for determining, via at least said user wireless device, whether to selectively enforce said at least one policy against said user wireless device.

8. The apparatus of claim 1, the one or more computer programs further comprising instructions for providing a user of said user wireless device at least one opportunity of accepting or rejecting association with said access point before said association is created and said at least one policy enforced;

wherein said at least one opportunity comprises generating a display on said wireless device indicating said at least one policy associated with said at least one access point.

9. The apparatus of claim 8, wherein said at least one access point comprises a plurality of policies, and said instructions for generating a display comprises instructions for generating distinct icons or graphical images for each of said plurality of policies of said at least one access point.

10. The apparatus of claim 1, the one or more computer programs further comprising instructions for configuring said user wireless device so as to implement a user-specific policy, said user-specific policy comprising determining whether or not to associate with said at least one access point based at least in part on said at least one operational policy.

11. The apparatus of claim 1, wherein said at least one access point comprises a plurality of wireless interfaces, each having independent policy functions.

12. The apparatus of claim 1, wherein said instructions for defeating user control of at least one component of said wireless device controlled by said at least one policy comprises instructions for blocking or disabling user control of at least one of:

(i) an audio or audible function of said wireless device;

or (ii) a display function of said wireless device.

13. A computer-program storage apparatus for operating a wireless network having an access point and a user wireless mobile device having a wireless interface adapted to communicate with said access point comprising a memory having one or more computer programs stored thereon, the one or more computer programs being executable by one or more processors and the one or more computer programs comprising:

instructions for providing at least one operational policy for said access point;

instructions for determining a user-based policy for association between said user wireless device and said access point;

instructions for evaluating said at least one operational policy and said user-based policy to determine if said association is permitted; and

if said instructions for evaluating indicates that said association is permitted;

instructions for creating said association; and

instructions for enforcing said at least one policy for said user wireless device when said device is associated with said access point.

14. The apparatus of claim 13, the one or more computer programs further comprising instructions for transmitting a command causing wake-up of said wireless mobile device from a sleep or reduced power mode so as to facilitate said determining said user-based policy.

15. The apparatus of claim 14, the one or more computer programs further comprising instructions for said access point determining whether said wireless mobile device is in said sleep or reduced power mode before said act of transmitting.