Systems and methods for application access control
AssigneeVerizon Patent and Licensing Inc.
InventorsValerie Feldmann, Kevin Xu, Robert Belson
Life of this patent
Estimating the term…
Abstract
A system described herein may provide a technique for selectively granting or revoking/denying access to applications, services, data, etc. to a User Equipment (“UE”) based on location-based policies and a network-determined location of the UE. The network-determined location may be determined by elements of a wireless network, such as a Mobility Management Entity (“MME”), Access and Mobility Management Function (“AMF”), or other suitable element.
Claims20
A device, comprising:
- one or more processors configured to:
- receive an access control policy indicating a particular set of types of User Equipment (“UEs”);
- grant access to a particular UE when a type of the particular UE is included in the particular set of types indicated by the access control policy, wherein granting the access includes allowing the particular UE to execute a particular set of applications;
- and
- deny access to the particular UE when the type of the particular UE is not included in the particular set of types indicated by the access control policy, wherein denying the access includes disabling the particular set of applications at the particular UE, wherein disabling the particular set of applications includes:
- altering a display of one or more icons, in a user interface of the particular UE, that correspond to the particular set of disabled applications, wherein the altering includes replacing the one or more icons with one or more different icons,
- receiving, via the user interface, a user selection of a particular icon associated with a particular application of the particular set of disabled applications, and
- presenting, based on receiving the user selection of the particular icon, information indicating the particular access control policy based on which the access was denied, including an indication that the particular application was disabled based on the type of the particular UE.
A non-transitory computer-readable medium, storing a plurality of processor-executable instructions to:
- receive an access control policy indicating a particular set of types of User Equipment (“UEs”);
- grant access to a particular UE when a type of the particular UE is included in the particular set of types indicated by the access control policy, wherein granting the access includes allowing the particular UE to execute a particular set of applications;
- and
- deny access to the particular UE when the type of the particular UE is not included in the particular set of types indicated by the access control policy, wherein denying the access includes disabling the particular set of applications at the particular UE, wherein disabling the particular set of applications includes:
- altering a display of one or more icons, in a user interface of the particular UE, that correspond to the particular set of disabled applications, wherein the altering includes replacing the one or more icons with one or more different icons,
- receiving, via the user interface, a user selection of a particular icon associated with a particular application of the particular set of disabled applications, and
- presenting, based on receiving the user selection of the particular icon, information indicating the particular access control policy based on which the access was denied, including an indication that the particular application was disabled based on the type of the particular UE.
A method, comprising:
- receiving an access control policy indicating a particular set of types of User Equipment (“UEs”);
- granting access to a particular UE when a type of the particular UE is included in the particular set of types indicated by the access control policy, wherein granting the access includes allowing the particular UE to execute a particular set of applications;
- and
- denying access to the particular UE when the type of the particular UE is not included in the particular set of types indicated by the access control policy, wherein denying the access includes disabling the particular set of applications at the particular UE, wherein disabling the particular set of applications includes:
- altering a display of one or more icons, in a user interface of the particular UE, that correspond to the particular set of disabled applications, wherein the altering includes replacing the one or more icons with one or more different icons,
- receiving, via the user interface, a user selection of a particular icon associated with a particular application of the particular set of disabled applications, and
- presenting, based on receiving the user selection of the particular icon, information indicating the particular access control policy based on which the access was denied, including an indication that the particular application was disabled based on the type of the particular UE.
Dependencies are inferred from the claim text.