Access control list for applications on mobile devices during a remote control session

• US 9,224,001 B2
• Filed: 03/15/2013
• Issued: 12/29/2015
• Est. Priority Date: 03/30/2012
• Status: Active Grant

• Current Assignee: Vmware LLC (Broadcom, Inc.)
• Original Assignee: AetherPal, Inc. (Broadcom, Inc.)
• Inventors: Ayyalasomayajula, Subramanyam, Palanichamy, Ranjithkumar, Gonsalves, Deepak, Kutchuk, Artun
• Primary Examiner(s): LE, CHAU D
• Application Number:
  US13/842,483
• Publication Number:
  US 20130263287A1
• Time in Patent Office: 1,019 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

A method of implementing access restrictions on mobile devices during a remote control session Network based restrictions; User controlled restrictions, or User controlled access list restrictions. A remote support technician connects to a mobile device to perform remote access to the mobile device. As part of the remote control session a policy can be pushed to the device that would have a list of applications that would need to be allowed by the user to be shared with remote technician. Alternatively no policy is pushed and the user must allow remote support technician access.

Claims

1. A method of implementing access restrictions on a mobile device during a remote management session, the method comprising:

establishing a remote management session between a console and a mobile device;

providing an access control policy to the mobile device;

attempting, by the console, to access an application on the mobile device;

receiving at the console an access control violation notification on a condition that a violation is detected, wherein a user of the mobile device determines the access control violation; and

perceiving a pre-defined image of the mobile device at the console upon disapproval by the user of the mobile device of an access attempt of the application.

2. The method according to claim 1, further comprising:

perceiving paused streaming on the mobile device at the console upon disapproval by a user of the mobile device of an access attempt of the application.

3. The method according to claim 1, further comprising:

waiting for a grant request from the user of the mobile device on a condition that the application uses pre-identified sensitive information.

4. The method according to claim 3, wherein the pre-identified sensitive information is location information.

5. The method according to claim 1, wherein the application is on a list of restricted applications.

6. The method according to claim 5, wherein a restriction is based on a group.

7. The method according to claim 5, wherein a restriction is based on a role.

8. The method according to claim 5, wherein a restriction is based on at least one of a mobile device model, an operating system and a software version.

9. The method according to claim 1, wherein the access control policy allows a predefined level of access to the application.

10. The method according to claim 9, wherein the predefined level of access permits access to settings.

11. The method according to claim 9, wherein the predefined level of access disallows access to data.

12. The method according to claim 1, wherein certain information is permanently restricted.

13. The method according to claim 1, wherein the remote management session is initiated by the user of the mobile device.

14. The method according to claim 1, wherein the remote management session is remote technician console initiated.

15. The method according to claim 1, wherein the access control policy is at least one of a network control policy and a user control policy.

16. The method according to claim 1, wherein the access control policy includes at least one of a blacklist, and user allowed access list.

17. The method according to claim 1, wherein when a remote support technician seeks access, the user of the mobile device gets a notification that permits the user of the mobile device to allow the remote support technician to access the application.

18. A system for implementing access restrictions on a mobile device during a remote management session, comprising:

a remote technician console configured to establish a remote management session with a mobile device;

the remote technician console configured to attempt access to an application on the mobile device;

the remote technician console configured to receive an access control violation notification on a condition that violation is detected based on an access control policy, wherein a user of the mobile device determines the access control violation; and

the remote technician console configured to perceive a pre-defined image of the mobile device upon disapproval by the user of the mobile device of an access attempt of the application.

19. The system according to claim 18, further comprising:

the remote technician console configured to transmit the access control policy to the mobile device.

20. The system according to claim 18, wherein the access control policy is a user control policy.

21. The system according to claim 18, further comprising:

the remote technician console configured to perceive paused streaming on the mobile device upon disapproval by a user of the mobile device of an access attempt of the application.

22. The system according to claim 18, wherein the access control policy allows a predefined level of access to the application.

23. The system according to claim 22, wherein the predefined level of access permits access to settings and disallows access to data.

24. The system according to claim 18, further comprising:

the remote technician console configured to request user approval from the user of the mobile device on a condition that the application uses pre-identified sensitive information.

25. The system according to claim 18, wherein certain information is permanently restricted.

26. The system according to claim 18, wherein the remote management session is initiated by the user of the mobile device.

27. The system according to claim 18, wherein the remote management session is remote technician console initiated.

28. The system according to claim 18, wherein the access control policy includes at least one of a blacklist, and user allowed access list.

29. The system according to claim 18, wherein when a remote support technician seeks access, the user of the mobile device gets a notification that permits the user of the mobile device to allow the remote support technician to access the application.

30. A method of implementing access restrictions on a mobile device during a remote management session, the method comprising:

establishing a remote management session between a console and a mobile device;

providing an access control policy to the mobile device;

determining access to an application on the mobile device based on the access control policy, wherein an access attempt is by the console;

transmitting an access control violation notification on a condition that a violation is detected based on the access control policy, wherein a user of the mobile device determines the access control violation; and

perceiving a pre-defined image of the mobile device at the console upon disapproval by the user of the mobile device of an access attempt of the application.