Time-based configuration policy toggling

• US 9,219,741 B2
• Filed: 05/02/2013
• Issued: 12/22/2015
• Est. Priority Date: 05/02/2013
• Status: Active Grant

• Current Assignee: AirWatch LLC (Broadcom, Inc.)
• Original Assignee: AirWatch LLC (Broadcom, Inc.)
• Inventors: Dabbiere, Alan, Marshall, John, Stuntebeck, Erich
• Primary Examiner(s): Nguyen, Quang N
• Application Number:
  US13/875,414
• Publication Number:
  US 20140330944A1
• Time in Patent Office: 964 Days
• Field of Search: 709/220, 709/203, 709/221, 709/222, 709/223, 709/224, 455/456, 726/1, 726/4, 715/224
• US Class Current: 1/1
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06Q 10/06314 Calendaring for a resource
• CPC Class Codes: G06Q 10/105 Human resources
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 43/0876 Network utilisation, e.g. volume of load or congestion level
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/37 Managing security policies for mobile devices or for controlling mobile applications
• CPC Class Codes: H04W 12/61 Time-dependent
• CPC Class Codes: H04W 12/63 Location-dependent; Proximity-dependent
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/021 Services related to particular areas, e.g. point of interest [POI] services, venue services or geofences
• CPC Class Codes: H04W 4/029 Location-based management or tracking services
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring
• CPC Class Codes: H04W 8/18 : Processing of user or subscriber data, e.g. subscribed services, user preferences or user profiles; Transfer of user or subscriber data

Abstract

Time-based configuration profile toggling may be provided. Configuration profiles associated with user devices may be identified, determinations of whether the user devices are authorized to enable the configuration profiles on the user devices may be made based at least in part on time constraints, and the configuration profiles may be enabled on the user devices if the time constraints are satisfied.

Claims

1. A method comprising:

identifying, by at least one computing device, a personal configuration profile associated with a user device from a memory;

determining, by the at least one computing device, whether the user device is authorized to enable the personal configuration profile on the user device based at least in part on;

whether a current time associated with the user device complies with a first compliance rule that specifies at least one time period when the user device is authorized to enable the personal configuration profile on the user device;

or

whether a current location associated with the user device complies with a second compliance rule that specifies at least one location where the user device is authorized to enable the personal configuration profile on the user device; and

in response to a determination that the user device is not authorized to enable the personal configuration profile on the user device;

disabling, by the at least one computing device, the personal configuration profile on the user device;

identifying, by the at least one computing device, a business configuration profile associated with the user device from the memory;

determining, by the at least one computing device, whether the user device is authorized to enable the business configuration profile on the user device based at least in part on;

whether the current time associated with the user device complies with a third compliance rule that specifies at least one time period when the user device is authorized to enable the business configuration profile on the user device;

or

whether the current location associated with the user device complies with a fourth compliance rule that specifies at least one location where the user device is authorized to enable the business configuration profile on the user device; and

enabling, by the at least one computing device, the business configuration profile on the user device in response to a determination that the user device is authorized to enable the business configuration profile on the user device based at least in part on the current time or the current location.

2. The method of claim 1, wherein the business configuration profile associated with the user device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

3. The method of claim 1, wherein the personal configuration profile associated with the user device is associated with at least one of:

personal data, a personal application, a personal software feature, and a personal hardware feature.

4. The method of claim 1, wherein the current location associated with the user device is determined using global positioning system (GPS), wireless fidelity (Wi-Fi), or cellular network tower triangulation.

5. The method of claim 1, wherein the disabling of the personal configuration profile and the enabling of the business configuration profile is caused by a remote computing device using at least one application programming interface (API) call to an operating system of the user device.

6. The method of claim 1, wherein a determination of whether the user device complies with the first compliance rule, the second compliance rule, the third compliance rule, or the fourth compliance rule is performed by an agent application executable on the user device based at least in part on a device profile associated with the user device.

7. The method of claim 1, further comprising enabling, by the at least one computing device, the personal configuration profile on the user device in response to a determination that the user device is authorized to enable the personal configuration profile on the user device.

8. A non-transitory computer-readable medium having program instructions stored thereon that, when executed by at least one computing device, cause the at least one computing device to:

identify a personal configuration profile from a memory, the personal configuration profile being enabled on a user device;

determine whether the user device is authorized to enable the personal configuration profile on the user device based at least in part on;

whether a current time associated with the user device complies with a first compliance rule that specifies at least one time period when the user device is authorized to enable the personal configuration profile on the user profile;

or

whether a current location associated with the user device complies with a second compliance rule that specifies at least one location where the user device is authorized to enable the personal configuration profile on the user device; and

in response to a determination that the user device is not authorized to enable the personal configuration profile on the user device;

disable the personal configuration profile on the user device;

identify a business configuration profile associated with the user device from the memory;

determine whether the user device is authorized to enable the business configuration profile on the user device based at least in part on;

whether the current time associated with the user device complies with a third compliance rule that specifies at least one time period when the user device is authorized to enable the business configuration profile on the user profile;

or

whether the current location associated with the user device complies with a fourth compliance rule that specifies at least one location where the user device is authorized to enable the business configuration profile on the user device; and

enable the business configuration profile on the user device in response to a determination that the user device is authorized to enable the business configuration profile on the user device based at least in part on the current location or the current time.

9. The non-transitory computer-readable medium of claim 8, wherein the business configuration profile associated with the user device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

10. The non-transitory computer-readable medium of claim 8, wherein the personal configuration profile associated with the user device is associated with at least one of:

personal data, a personal application, a personal software feature, and a personal hardware feature.

11. The non-transitory computer-readable medium of claim 8, wherein the current location associated with the user device is determined using global positioning system (GPS), wireless fidelity (Wi-Fi), or cellular network tower triangulation.

12. The non-transitory computer-readable medium of claim 8, wherein the disabling of the personal configuration profile and the enabling of the business configuration profile is caused by a remote computing device using at least one application programming interface (API) call to an operating system of the user device.

13. The non-transitory computer-readable medium of claim 8, wherein a determination of whether the user device complies with the first compliance rule, the second compliance rule, the third compliance rule, or the fourth compliance rule is performed by an agent application executable on the user device based at least in part on a device profile associated with the user device.

14. A system comprising:

at least one memory storage;

at least one computing device coupled to the at least one memory storage; and

program instructions that, when executed by the at least one computing device, cause the at least one computing device to;

identify a business configuration profile associated with a user device;

determine whether the user device is authorized to enable the business configuration profile on the user device based at least in part on;

whether a current time associated with the user device complies with a first compliance rule that specifies at least one time period when the user device is authorized to enable the business configuration profile on the user device;

or

whether a current location associated with the user device complies with a second compliance rule that specifies at least one location where the user device is authorized to enable the business configuration profile on the user device;

in response to a determination that the user device is not authorized to enable the business configuration profile on the user device based at least in part on whether the current time associated with the user device complies with at least one compliance rule;

disable the business configuration profile on the user device;

identify a personal configuration profile associated with the user device from the at least one memory storage;

determine whether the user device is authorized to enable the personal configuration profile on the user device based at least in part on;

whether the current time associated with the user device complies with a third compliance rule that specifies at least one time period when the user device is authorized to enable the personal configuration profile on the user device;

or

whether the current location associated with the user device complies with a fourth compliance rule specifying at least one location where the user device is authorized to enable the personal configuration profile on the user device; and

enable the personal configuration profile on the user device in response to a determination that the user device is authorized to enable the personal configuration profile on the user device based at least in part on the current location or the current time.

15. The system of claim 14, wherein the business configuration profile associated with the user device is associated with at least one of:

business data, a business application, a business software feature, and a business hardware feature.

16. The system of claim 14, wherein the personal configuration profile associated with the user device is associated with at least one of:

personal data, a personal application, a personal software feature, and a personal hardware feature.

17. The system of claim 14, wherein the current location associated with the user device is determined using global positioning system (GPS), wireless fidelity (Wi-Fi), or cellular network tower triangulation.

18. The system of claim 14, wherein the disabling of the business configuration profile and the enabling of the personal configuration profile is caused by a remote computing device using at least one application programming interface (API) call to an operating system of the user device.

19. The system of claim 14, wherein a determination of whether the user device complies with the first compliance rule, the second compliance rule, the third compliance rule, or the fourth compliance rule is performed by an agent application executable on the user device based at least in part on a device profile associated with the user device.

20. The system of claim 14, further comprising program instructions that, when executed by the at least one computing device, cause the at least one computing device to enable the business configuration profile on the user device in response to a determination that the user device is authorized to enable the business configuration profile on the user device.