# US 10,771,328 B2 · Enforcing device settings for mobile devices > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,771,328 B2 - Document ID: US10771328B2 - Status: Granted - Kind: B2 - Application number: 16/537,839 - Filed: 2019-08-12 - Published: 2019-11-28 - Granted: 2020-09-08 - Earliest claimed: 2005-06-30 - Assignees: Microsoft Technology Licensing, LLC - Applicants: Microsoft Technology Licensing, LLC - Inventors: David P. Limont; John Allen Atwood; Massimiliano Ciccotosto; Omar Aftab; Patrick Tousignant; Selvaraj Nalliah; Zhidong Yang - Web page: https://patentgrep.com/patent/US10771328B2 ## CPC - H04L 41/0813: characterised by the conditions triggering a change of settings - H04L 41/0869: Validating the configuration within one network element - H04L 63/10: {for controlling access to devices or network resources} - H04W 8/245: {from a network towards a terminal} - H04L 41/28: Restricting access to network management systems or functions, e.g. using authorisation function to access network configuration - H04M 1/72445: for supporting Internet browser applications - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72) - H04M: TELEPHONIC COMMUNICATION (circuits for controlling other apparatus via a telephone cable and not involving telephone switching apparatus G08) ## Abstract The present invention extends to methods, systems, and computer program products for enforcing device settings for mobile devices. Generally, a computer system enforces appropriate mobile device settings (e.g., policy and/or configuration settings) prior to permitting a mobile device to access maintained data. The computer system receives a request from a mobile device. The computer system determines that current mobile device settings are not appropriate for accessing the maintained data. The computer system sends device settings, representing a new mobile device configuration that is appropriate accessing the maintained data, to the mobile device. The computer system receives an indication that the mobile device is configured in accordance with the device settings. The computer system permits the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device settings. ## Claims ### Claim 1 At a computer system that maintains data accessible to mobile devices, a method for enforcing an appropriate mobile device configuration prior to permitting a mobile device to access the maintained data, the method comprising: receiving a request, from a mobile device, to access data maintained by the computer system; prior to permitting access, sending device configuration settings to the mobile device, the device configuration settings comprising a device security setting for the mobile device; receiving an indication that the mobile device is configured in accordance with the device configuration settings and a second request to access the data maintained by the server subsequent to sending the device configuration settings to the mobile device; and permitting the mobile device to access the maintained data in response to receiving the indication that the mobile device is configured in accordance with the device configuration settings. ### Claim 2 (depends on 1) The method as recited in claim 1, wherein the request is received in accordance with HTTP. ### Claim 3 (depends on 1) The method as recited in claim 1, wherein the-act of receiving a request is for a Web page. ### Claim 4 (depends on 1) The method as recited in claim 1, wherein the mobile device comprises one of: a PDA, a watch, a laptop, or a hand-held device. ### Claim 5 (depends on 1) The method as recited in claim 1, further comprising determining that current mobile device configuration is not appropriate for accessing the maintained data. ### Claim 6 (depends on 1) The method as recited in claim 1, wherein sending device configuration settings to the mobile device comprises sending configuration settings that are designated to alter the current configuration of one or more of an operating system, an application program, hardware, allocated resources, a network interface, or wireless protocol settings, at the mobile device. ### Claim 7 (depends on 1) The method as recited in claim 1, wherein receiving the indication that the mobile device is configured in accordance with the device configuration settings further comprises comparing a received configuration version to one or more configuration versions representing appropriate configurations for accessing the maintained data. ### Claim 8 (depends on 1) The method as recited in claim 1, further comprising notifying the mobile device that access to maintained data has been permitted. ### Claim 9 At a computer system that maintains data accessible to mobile devices, a method for enforcing mobile device access policies prior to permitting mobile device access to maintained data, the method comprising: receiving a data command from a mobile device to access data maintained by the computer system, the data command indicating a policy version, the policy version representing the current policy settings at the mobile device; notifying the mobile device that the current policy settings are not appropriate for accessing the maintained data; receiving a policy request from the mobile device, the policy request requesting policy settings that are appropriate for accessing the maintained data; identifying updated policy settings that are appropriate for accessing the maintained data; prior to permitting access, sending the updated policy settings along with a corresponding updated policy version to the mobile device, the updated policy version representing the updated policy settings comprising a device security setting for the mobile device; receiving a second data request along with the updated policy version from the mobile device, the data request requesting that the mobile device be permitted to access the maintained data, the updated policy version indicating that the mobile device is configured in accordance with the updated policy settings; and notifying the mobile device that access to the maintained data has been permitted. ### Claim 10 (depends on 9) The method as recited in claim 9, wherein the data command comprises a request for electronic mail data. ### Claim 11 (depends on 9) The method as recited in claim 9, further comprising determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system. ### Claim 12 (depends on 9) The method as recited in claim 9, wherein determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system comprises determining that the mobile device does not support policy settings. ### Claim 13 (depends on 9) The method as recited in claim 9, wherein determining that the current policy settings at the mobile device are not appropriate for accessing data maintained by the computer system comprises determining that the mobile device does not support PIN lock. ### Claim 14 (depends on 9) The method as recited in claim 9, wherein the act of receiving a policy request from the mobile device comprises an act of receiving a policy request for policy settings that are appropriate for accessing electronic mail data. ### Claim 15 (depends on 9) The method as recited in claim 9, wherein the act of receiving a policy request from the mobile device comprises an act of receiving a policy request from a mobile device selected from among a mobile telephone, a PDA, and a watch. ### Claim 16 (depends on 9) The method as recited in claim 9, wherein identifying updated policy settings that are appropriate for accessing the maintained data comprises identifying one or more of PIN lock settings, storage wipe settings, periodic enforcement settings, and policy exceptions. ### Claim 17 (depends on 9) The method as recited in claim 9, wherein sending the updated policy settings along with a corresponding updated policy version to the mobile device comprises sending or more of PIN lock settings, storage wipe settings, periodic enforcement settings, and policy exceptions. ### Claim 18 (depends on 9) The method as recited in claim 9, where receiving a data request along with the updated policy version from the mobile device comprises receiving a policy version indicating that the user of the mobile device is at least temporarily excepted from policy compliance. ### Claim 19 (depends on 9) The method as recited in claim 9, further comprising initiating a remote storage wipe of the mobile device. ### Claim 20 A system comprising: at least one processor; and memory encoding computer executable instructions that, when executed by the at least one processor, performs a method comprising: receiving a data command from a mobile device to access data maintained by the computer system; identifying updated policy settings that are appropriate for accessing the maintained data; prior to permitting access, sending the updated policy settings along with a corresponding updated policy version to the mobile device, the updated policy version representing the updated policy settings comprising a device security setting for the mobile device; receiving a second data request along with the updated policy version from the mobile device, the data request requesting that the mobile device be permitted to access the maintained data, the updated policy version indicating that the mobile device is configured in accordance with the updated policy settings; and notify the mobile device that access to the maintained data has been permitted.