Enforcing device settings for mobile devices

• US 9,014,673 B2
• Filed: 11/26/2013
• Issued: 04/21/2015
• Est. Priority Date: 06/30/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Limont, David P., Atwood, John Allen, Ciccotosto, Massimiliano, Aftab, Omar, Tousignant, Patrick, Nalliah, Selvaraj, Yang, Zhidong
• Primary Examiner(s): Brandt, Christopher M
• Application Number:
  US14/090,924
• Publication Number:
  US 20140089475A1
• Time in Patent Office: 511 Days
• Field of Search: 455/410, 455/411, 455/412.1, 455/412.2, 455/413, 455/414.1, 455/414.2, 455/414.3, 726/1, 726/2, 726/3, 726/4, 726/5, 726/6, 709/217, 709/218, 709/219, 709/220, 709/221, 709/222
• US Class Current: 455/412.2
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

The present invention extends to methods, systems, and computer program products for enforcing device settings for mobile devices. Generally, a computer system enforces appropriate mobile device settings (e.g., policy and/or configuration settings) prior to permitting a mobile device to access maintained data. The computer system receives a request from a mobile device. The computer system determines that current mobile device settings are not appropriate for accessing the maintained data. The computer system sends device settings, representing a new mobile device configuration that is appropriate accessing the maintained data, to the mobile device. The computer system receives an indication that the mobile device is configured in accordance with the device settings. The computer system permits the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device settings.

Claims

1. A system comprising:

at least one processor; and

memory encoding computer executable instructions that, when executed by the at least one processor, perform a method for enforcing an appropriate mobile device configuration prior to permitting a mobile device to access the maintained data, the method comprising;

receiving a request from a mobile device, the request requesting that the mobile device be permitted to access data maintained by the computer system, the request indicating a current mobile device configuration settings of the mobile device;

determining that the current mobile device configuration settings are not appropriate for accessing the maintained data;

based upon the determination, sending a notification indicating that the current device configuration settings are not acceptable for accessing the maintained data;

receiving a policy request to the computer system, the policy request requesting policy settings that are appropriate for accessing the maintained data;

in response to receiving the policy request, sending device configuration settings to the mobile device, the device configuration settings representing a new mobile device configuration that is appropriate accessing the maintained data;

receiving an indication that the mobile device is configured in accordance with the device configuration settings subsequent to sending the device configuration settings to the mobile device; and

permitting the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device configuration settings.

2. The system as recited in claim 1, wherein receiving a request from a mobile device comprises receiving a request that was sent in accordance with HTTP.

3. The system as recited in claim 1, wherein receiving a request from a mobile device comprises receiving a request for a Web page.

4. The system as recited in claim 1, wherein receiving a request from a mobile device comprises receiving a request from a mobile device selected from among a mobile telephone, a PDA, and a watch.

5. The system as recited in claim 1, wherein determining that current mobile device configuration is not appropriate for accessing the maintained data comprises comparing a received configuration version to one or more configuration versions representing appropriate configurations for accessing the maintained data.

6. The system as recited in claim 1, wherein sending device configuration settings to the mobile device comprises sending configuration settings that are designated to alter the current configuration of one or more of an operating system, an application program, hardware, allocated resources, a network interface, and wireless protocol settings, at the mobile device.

7. The system as recited in claim 1, further comprises:

notifying the mobile device that access to maintained data has been permitted.

8. The system as recited in claim 7, wherein receiving an indication that the mobile device is configured in accordance with the device configuration settings comprises comparing a received configuration version to one or more configuration versions representing appropriate configurations for accessing the maintained data.

9. A system comprising:

at least one processor; and

memory encoding computer executable instructions that, when executed by the at least one processor, perform a method for enforcing mobile device access policies prior to permitting mobile device access to maintained data, the method comprising;

receiving a data command from a mobile device, the data command indicating a policy version, the policy version representing the current policy settings at the mobile device;

determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system;

notifying the mobile device that the current policy settings are not appropriate for accessing the maintained data;

receiving a policy request from the mobile device, the policy request requesting policy settings that are appropriate for accessing the maintained data;

in response to receiving the policy request, identifying updated policy settings that are appropriate for accessing the maintained data;

sending the updated policy settings along with a corresponding updated policy version to the mobile device, the updated policy version representing the updated policy settings;

receiving a data request along with the updated policy version from the mobile device, the data request requesting that the mobile device be permitted to access the maintained data, the updated policy version indicating that the mobile device is configured in accordance with the updated policy settings; and

permitting the mobile device that access to the maintained data has been permitted.

10. The method as recited in claim 9, wherein receiving a data command from a mobile device comprises receiving a request for electronic mail data.

11. The method as recited in claim 9, wherein determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system comprises comparing a received policy version, representing the current policy settings to one or more policy versions representing appropriate policy settings for accessing the maintained data.

12. The method as recited in claim 9, wherein determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system comprises determining that the mobile device does not support policy settings.

13. The method as recited in claim 9, wherein determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system comprises determining that the mobile device does not support PIN lock.

14. The method as recited in claim 9, wherein receiving a policy request from the mobile device comprises receiving a policy request for policy settings that are appropriate for accessing electronic mail data.

15. The method as recited in claim 9, wherein receiving a policy request from the mobile device comprises receiving a policy request from a mobile device selected from among a mobile telephone, a PDA, and a watch.

16. The method as recited in claim 9, wherein identifying updated policy settings that are appropriate for accessing the maintained data comprises identifying one or more of PIN lock settings, storage wipe settings, periodic enforcement settings, and policy exceptions.

17. The method as recited in claim 9, wherein sending the updated policy settings along with a corresponding updated policy version to the mobile device comprises sending or more of PIN lock settings, storage wipe settings, periodic enforcement settings, and policy exceptions.

18. The method as recited in claim 9, where receiving a data request along with the updated policy version from the mobile device comprises receiving a policy version indicating that the user of the mobile device is at least temporarily excepted from policy compliance.

19. The method as recited in claim 9, further comprising:

initiating a remote storage wipe of the mobile device.

20. A computer storage media having stored thereon computer-executable instructions that, when executed by a processor, cause the computer system to perform a method comprising:

receive a data command from a mobile device, the data command indicating a policy version, the policy version representing the current policy settings at the mobile device;

determine that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system;

notify the mobile device that the current policy settings are not appropriate for accessing the maintained data;

receive a policy request from the mobile device, the policy request requesting policy settings that are appropriate for accessing the maintained data;

in response to receiving the policy request, identify updated policy settings that are appropriate for accessing the maintained data;

send the updated policy settings along with a corresponding updated policy version to the mobile device, the updated policy version representing the updated policy settings;

receive a data request along with the updated policy version from the mobile device, the data request requesting that the mobile device be permitted to access the maintained data, the updated policy version indicating that the mobile device is configured in accordance with the updated policy settings; and

notify the mobile device that access to the maintained data has been permitted.