System and method for controlling configuration settings for mobile communication devices and services

• US 9,584,366 B2
• Filed: 06/01/2015
• Issued: 02/28/2017
• Est. Priority Date: 10/26/2001
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: Blackberry Limited
• Inventors: Godfrey, James A., Chiu, Denny K., Gao, Wen
• Primary Examiner(s): Wong, Warner
• Application Number:
  US14/727,004
• Publication Number:
  US 20150295754A1
• Time in Patent Office: 638 Days
• Field of Search: 370/254, 370/338, 370/350, 370/503, 709/219, 717/172, 717/178, 717/177, 726/1, 725/132, 713/191
• US Class Current: 1/1
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/10 Multimedia information
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/561 Adding application-functional data or data for application control, e.g. adding metadata
• CPC Class Codes: H04L 67/564 Enhancement of application control based on intercepted application data
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04W 8/183 Processing at user equipment or user record carrier

Abstract

A system for controlling configuration settings for mobile data communication devices and services includes a redirection server and a policy generation system. The redirection server detects a triggering event in a host system and in response to the triggering event continuously redirects data items from the host system to a wireless network. Each mobile data communication device receives data items from the wireless network and includes a device configuration stored in a memory location on the mobile data communication device. The device configuration of each mobile data communication device controls one or more functions of the mobile data communication device. The policy generation system receives a policy setting from a user interface and stores the policy setting in a user information record associated with a mobile data communication device. The redirection server detects the policy setting in the user information record and in response to detecting the policy setting transmits the policy setting over the wireless network to the mobile data communication device associated with the user information record. The mobile data communication device automatically modifies the device configuration to include the policy setting. Methods of controlling a configuration setting in mobile data communication devices are also disclosed.

Claims

1. A non-transitory computer-readable medium storing program instructions to control a configuration setting in a mobile data communication device in a communication system, wherein the communication system includes a redirection system that detects a triggering event in a host system and in response to the triggering event continuously redirects data items from the host system over a wireless network to the mobile data communication device, wherein the instructions, when executed by the processor, cause the processor to:

provide a device configuration for the mobile data communication device that controls one or more functions of the mobile data communication device;

receive a policy setting for the mobile data communication device at a policy generation system;

generate an update message that corresponds to the policy setting;

transmit the update message through the redirection system to the wireless network;

receiving the update message at the mobile data communication device; and

in response to the update message, automatically modify the device configuration to include the policy setting;

wherein the policy setting includes a setting selected from the group consisting of;

a setting that specifies whether particular software applications or services can be installed and executed on the mobile data communication device, a setting that specifies whether a security password is required to access the mobile data communication device, a setting that specifies whether a user of the mobile data communication device can change the device configuration, a setting that enables a long term mobile data communication device timeout, a setting that enables mobile data communication device security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the mobile data communication device, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

2. The non-transitory computer-readable medium of claim 1, wherein the policy setting included in the device configuration may only be modified by a new policy setting originating from the policy generation system.

3. The non-transitory computer-readable medium of claim 1, further comprising storing the policy setting in a user information record associated with the mobile data communication device.

4. The non-transitory computer-readable medium of claim 3, further comprising detecting the policy setting stored in the user information record and generating the update message in response to detecting the policy setting.

5. The non-transitory computer-readable medium of claim 1, wherein the update message is in the form of an electronic mail message.

6. The non-transitory computer-readable medium of claim 1, further comprising encrypting the policy setting and generating the update message using the encrypted policy setting;

and decrypting the policy setting at the mobile data communication device.

7. The non-transitory computer-readable medium of claim 1, wherein the generating the update message comprises encapsulating the policy setting in a data packet;

and adding information to the data packet that identifies the mobile data communication device.

8. A non-transitory computer-readable medium storing program instructions to control a configuration setting in a group of mobile data communication devices in a communication system, wherein the communication system includes a redirection system that detects a triggering event in a host system and in response to the triggering event continuously redirects data items from the host system over a wireless network to one or more of the mobile data communication devices, wherein the instructions, when executed by the processor, cause the processor to:

define the group of mobile data communication devices;

provide a device configuration for each of the mobile data communication devices that controls one or more functions of the mobile data communication device;

receive a policy setting for the group of mobile data communication devices at a policy generation system;

generate an update message that corresponds to the policy setting;

transmit the update message through the redirection system to the wireless network;

receive the update message at each mobile data communication device in the group of mobile data communication devices; and

in response to the update message, each mobile data communication device in the group of mobile data communication devices automatically modify the device configuration to include the policy setting;

wherein the policy setting includes a setting selected from the group consisting of;

a setting that specifies whether particular software applications or services can be installed and executed on the group of mobile data communication devices, a setting that specifies whether a security password is required to access the group of mobile data communication devices, a setting that specifies whether users of the group of mobile data communication devices can change the device configuration, a setting that enables a long term mobile data communication device timeout, a setting that enables the group of mobile data communication devices security password pattern checking, a setting that specifies a maximum mobile data communication device security password age, a setting that specifies a maximum security timeout period for the group of mobile data communication devices, a setting that specifies a minimum length of a mobile data communication device security password, and a setting that specifies mobile data communication device owner information.

9. The non-transitory computer-readable medium of claim 8, wherein the policy setting included in the device configuration may only be modified by a new policy setting originating from the policy generation system.

10. The non-transitory computer-readable medium of claim 8, wherein the group of mobile data communication devices is defined based on at least one common policy setting.

11. A non-transitory computer-readable medium storing program instructions that when executed by a processor of a mobile data communication device, cause the processor to:

store in one or more memories one or more user information records for one or more mobile devices, each user information record comprising policy settings for controlling one or more functions of the one or more mobile devices;

generate a policy setting by a policy generation system executing on one or more processors, the policy setting stored in one or more user information records, the policy settings of each user information record being stored in a policy configuration file;

generate a list of policy settings on a user interface executing on the one or more processors, the list of policy settings including all policy settings stored in the policy configuration file and being dynamically updatable upon the addition of a new policy setting to the policy configuration file;

add, from the list of policy settings on the user interface, a new policy setting to one or more user information records;

detect the addition of a new policy setting to the one or more user information records; and

in response to detecting a new policy setting added to the one or more user information records, transmit the new policy setting over a wireless network to the one or more mobile devices associated with each user information record.

12. The non-transitory computer-readable medium of claim 11, wherein the policy setting is transmitted over the wireless network during periods of low network traffic.

13. The non-transitory computer-readable medium of claim 11, further comprising removing a preexisting policy setting from one or more user information records.

14. The non-transitory computer-readable medium of claim 11, wherein a new user information record is created for a particular mobile device if no previous policy settings exist for the particular mobile device.

15. The non-transitory computer-readable medium of claim 11, wherein the policy settings are transmitted in an update message in tab/value format.

16. The non-transitory computer-readable medium of claim 11, wherein policy settings with the highest prioritization level are transmitted before policy settings with a lower prioritization level.

17. The non-transitory computer-readable medium of claim 11, wherein policy settings are transmitted in electronic mail messages, the electronic mail messages comprising a digital signature.