Enforcing device settings for mobile devices

• US 9,929,904 B2
• Filed: 04/01/2015
• Issued: 03/27/2018
• Est. Priority Date: 06/30/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Limont, David P., Atwood, John Allen, Ciccotosto, Massimiliano, Aftab, Omar, Tousignant, Patrick, Nalliah, Selvaraj, Yang, Zhidong
• Primary Examiner(s): Brandt, Christopher M
• Application Number:
  US14/676,386
• Publication Number:
  US 20150207681A1
• Time in Patent Office: 1,091 Days
• Field of Search: 455410, 455411, 4554121, 4554122, 455413, 4554141, 4554142, 4554143, 726 1, 726 2, 726 3, 726 4, 726 5, 726 6, 709217, 709218, 709219, 709220, 709221, 709222
• CPC Class Codes: H04L 41/0813 characterised by the conditions triggering a change of settings
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element
• CPC Class Codes: H04L 41/28 Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04M 1/72445 for supporting Internet browser applications
• CPC Class Codes: H04W 8/245 from a network towards a terminal

Abstract

The present invention extends to methods, systems, and computer program products for enforcing device settings for mobile devices. Generally, a computer system enforces appropriate mobile device settings (e.g., policy and/or configuration settings) prior to permitting a mobile device to access maintained data. The computer system receives a request from a mobile device. The computer system determines that current mobile device settings are not appropriate for accessing the maintained data. The computer system sends device settings, representing a new mobile device configuration that is appropriate accessing the maintained data, to the mobile device. The computer system receives an indication that the mobile device is configured in accordance with the device settings. The computer system permits the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device settings.

Claims

1. A system comprising:

at least one processor; and

memory encoding computer executable instructions that, when executed by the at least one processor, perform a method comprising;

sending, from a device, a first request to a server, wherein the first request is a request to access data maintained by the server;

receiving a notification indicating that the current device configuration settings are not acceptable for accessing the data maintained by the server;

receiving at least one device configuration setting, wherein the at least one configuration setting comprises a personal identification number (PIN) lock activation setting that imposes requirements for establishing a PIN lock on the device;

applying, by the device, the at least one device configuration setting;

after applying the at least one device configuration setting, sending an indication that the device has applied the at least one device configuration setting and a second request to access the data maintained by the server; and

in response to sending the second request, receiving at least a portion of the maintained data.

2. The system of claim 1, wherein the memory further comprises instructions for sending, from the device, a policy request to the server.

3. The system of claim 2, wherein the policy request comprises a request for required device configuration settings to access the data maintained by the server.

4. The system of claim 1, wherein the first request comprises an indication of the current device configuration settings for the device.

5. The system of claim 1, wherein the memory further comprises instructions for in response to sending the second request, receiving a notification that the device is permitted to access the maintained data.

6. The system of claim 1, wherein the second request comprises an indication that the device is configured in accordance with the at least one device configuration setting.

7. The system of claim 1, wherein the device comprises one of:

a mobile phone;

a PDA; and

a watch.

8. The system of claim 1, wherein the requirements for establishing a PIN lock on the device define at least one of:

a PIN format setting; and

a number of PIN failures allowed prior to performing a local wipe.

9. A computer storage media device having stored thereon computer-executable instructions that, when executed by at least one processor, perform a method comprising:

sending, from a device, a first request to a server, wherein the first request is a request to access data maintained by the server;

receiving a notification indicating that the current device configuration settings are not acceptable for accessing the data maintained by the server;

receiving at least one device configuration setting, wherein the at least one configuration setting comprises a personal identification number (PIN) lock activation setting that imposes requirements for establishing a PIN lock on the device;

applying, by the device, the at least one device configuration setting;

after applying the at least one device configuration setting, sending an indication that the device has applied the at least one device configuration setting and a second request to access the data maintained by the server; and

in response to sending the second request, receiving at least a portion of the maintained data.

10. The computer storage media device of claim 9, comprising instructions for sending, from the device, a policy request to the server.

11. The computer storage media device of claim 10, wherein the policy request comprises a request for required device configuration settings to access the data maintained by the server.

12. The computer storage media device of claim 9, wherein the first request comprises an indication of the current device configuration settings for the device.

13. The computer storage media device of claim 9, wherein the data maintained by the server comprise email messages.

14. The computer storage media device of claim 9, further comprising instructions for in response to sending the second request, receiving a notification that the device is permitted to access the maintained data.

15. The computer storage media device of claim 9, wherein the second request comprises an indication that the device is configured in accordance with the at least one device configuration setting.

16. The computer storage media device of claim 9, wherein the device comprises one of:

a mobile phone;

a PDA; and

a watch.

17. A system comprising:

at least one processor; and

memory encoding computer executable instructions that, when executed by the at least one processor, perform a method comprising;

receiving a first request from a mobile device, wherein the first request is to access data;

determining that current policy settings for the mobile device are not appropriate for accessing the data;

sending, to the mobile device, at least one device configuration setting, wherein the at least one configuration setting comprises a personal identification number (PIN) lock activation setting that imposes requirements for establishing a PIN lock on the device;

after sending the at least one device configuration setting, receiving an indication that the device has applied the at least one device configuration setting and a second request to access the data; and

in response to the second request, providing access to the data.

18. The system of claim 17, wherein the first request comprises an indication of the current device configuration settings for the device.

19. The system of claim 17, wherein the second request comprises an indication that the device is configured in accordance with the at least one device configuration setting.