# US 10,313,355 B2 · Client side security management for an operations, administration and maintenance system for wireless clients > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,313,355 B2 - Document ID: US10313355B2 - Status: Granted - Kind: B2 - Application number: 15/630,802 - Filed: 2017-06-22 - Published: 2018-01-18 - Granted: 2019-06-04 - Earliest claimed: 2003-12-18 - Assignees: Intel Corporation - Applicants: Intel Corporation - Inventors: Casey Bahr - Web page: https://patentgrep.com/patent/US10313355B2 ## CPC - H04L 63/105: {Multiple levels of security} - G06F 21/62: Protecting access to data via a platform, e.g. using keys or access control rules - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04W 12/06: Authentication - H04W 12/084: using delegated authorisation, e.g. open authorisation [OAuth] protocol - G06F 2221/2141: Access rights, e.g. capability lists, access control lists, access tables, access matrices - H04W 88/02: Terminal devices - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) ## Abstract An Operations, Administration, and Maintenance (OA&M) 16 provides security for managed resources on a wireless client device 10 at many levels of granularity, from the entire device, to subsystems, to software and hardware components, services and applications, down to individual attributes. ## Claims ### Claim 1 A computer program product comprising a non-transitory computer-readable medium, comprising instructions, which when executed by a processor cause the processor to perform operations, the operations comprising: performing, by a wireless communications device, functionality of an Operations, Administration, and Maintenance (OA&M) system with managed resources, the managed resources comprising at least one application installed to run on the wireless communications device and at least one user preference, the at least one application and the at least one user preference embodied in the OA&M system as managed objects, wherein the functionality of the OA&M system comprises: providing, by the wireless communications device, a list of device owners that designates one or more owners allowed to create, modify, discover, examine, and define security for the managed resources, the list of device owners to designate the one or more owners allowed to discover and define security for the at least one application and the at least one preference; enabling, by an owner interface of the wireless communications device, the one or more owners to gain access to the managed resources; delegating, by the wireless communications device, authority by a first owner of the one or more owners to a second owner of the one or more owners, delegation of authority comprising a grant of a permission related to the managed resources, the grant of a permission comprising the authority to modify the user preference, wherein the OA&M system has the ability to limit a delegation of authority based on time limits and to revoke ownership; defining and authenticating, by the wireless communications device, access permissions for the at least one application and the at least one user preference; and applying, by the wireless communications device, access control mechanisms to the at least one application and the at least one user preference. ### Claim 2 (depends on 1) The computer program product of claim 1, wherein the operations further comprise revoking ownership of an owner. ### Claim 3 (depends on 1) The computer program product of claim 1, wherein the managed resources comprise software and user preferences. ### Claim 4 (depends on 1) The computer program product of claim 1, wherein the managed resources comprise a processor, a memory device, other semiconductor devices, other hardware components, or portions thereof. ### Claim 5 (depends on 1) The computer program product of claim 1, wherein the managed resources comprise a Profile that may implement permissions profiles, wherein the profile can be defined, installed, or removed as a single entity. ### Claim 6 (depends on 1) The computer program product of claim 1, further comprising limiting a delegation of authority based on time limits. ### Claim 7 A wireless communications device comprising: a transceiver and a processor coupled with the transceiver, the processor configured to perform functionality of an Operations, Administration, and Maintenance (OA&M) system, comprising: managed resources comprising at least one application installed to run on the wireless communications device and at least one user preference, the at least one application and the at least one user preference embodied in the OA&M system as managed objects; a list of device owners that designates one or more owners allowed to create, modify, discover, examine, and define security for the managed resources, the list of device owners to designate the one or more owners allowed to discover and define security for the at least one application and the at least one preference; and an owner interface coupled with the list of device owners to enable the one or more owners to gain access to the managed resources, the OA&M system to delegate authority by a first owner of the one or more owners to a second owner of the one or more owners, delegation of authority comprising a grant of a permission related to the managed resources, the grant of a permission comprising the authority to modify the user preference; to define and authenticate access permissions for the at least one application and the at least one user preference; and to apply access control mechanisms to the at least one application and the at least one user preference, wherein the OA&M system has the ability to limit a delegation of authority based on time limits and to revoke ownership. ### Claim 8 (depends on 7) The wireless communications device of claim 7, further comprising an antenna coupled with the transceiver. ### Claim 9 (depends on 7) The wireless communications device of claim 7, further comprising memory coupled with the processor. ### Claim 10 (depends on 7) The wireless communications device of claim 7, wherein the wireless communications device is a handheld device. ### Claim 11 (depends on 7) The wireless communications device of claim 7, wherein the managed resources further comprise an operating program, a communications program, firmware components, other software components, or portions thereof. ### Claim 12 (depends on 7) The wireless communications device of claim 7, wherein the managed resources comprise a processor, a memory device, other semiconductor devices, other hardware components, or portions thereof. ### Claim 13 (depends on 7) The wireless communications device of claim 7, wherein the managed resources comprise a Profile that may implement permissions profiles, wherein the profile can be defined, installed, or removed as a single entity. ### Claim 14 A method comprising: performing, by a wireless communications device, functionality of an Operations, Administration, and Maintenance (OA&M) system with managed resources, the managed resources comprising at least one application installed to run on the wireless communications device and at least one user preference, wherein the functionality of the OA&M system comprises: providing a list of device owners that designates one or more owners allowed to create, modify, discover, examine, and define security for the managed resources, the list of device owners to designate the one or more owners allowed to discover and define security for the at least one application and the at least one preference; enabling, by an owner interface of the wireless communications device, the one or more owners to gain access to the managed resources; delegating authority by a first owner of the one or more owners to a second owner of the one or more owners, delegation of authority comprising a grant of a permission related to the managed resources, the grant of a permission comprising the authority to modify the user preference, wherein the OA&M system has the ability to limit a delegation of authority based on time limits and to revoke ownership; defining and authenticating access permissions for the at least one application and the at least one user preference; and applying access control mechanisms to the at least one application and the at least one user preference. ### Claim 15 (depends on 14) The method of claim 14, further comprising revoking ownership of an owner. ### Claim 16 (depends on 14) The method of claim 14, wherein the managed resources further comprise an operating program, a communications program, firmware components, other software components, or portions thereof. ### Claim 17 (depends on 14) The method of claim 14, wherein the managed resources comprise a processor, a memory device, other semiconductor devices, other hardware components, or portions thereof. ### Claim 18 (depends on 14) The method of claim 14, wherein the managed resources comprise a Profile that may implement permissions profiles, wherein the profile can be defined, installed, or removed as a single entity. ### Claim 19 (depends on 14) The method of claim 14, further comprising limiting a delegation of authority based on time limits.